{"api_version":"1","generated_at":"2026-08-22T11:43:08+00:00","cve":"CVE-2026-24457","urls":{"html":"https://cve.report/CVE-2026-24457","api":"https://cve.report/api/cve/CVE-2026-24457.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-24457","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-24457"},"summary":{"title":"CVE-2026-24457","description":"An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2.","state":"PUBLISHED","assigner":"eclipse","published_at":"2026-03-05 19:16:02","updated_at":"2026-08-05 08:16:32"},"problem_types":["CWE-22","CWE-27","CWE-22 CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","CWE-27 CWE-27 Path Traversal: 'dir/../../filename'"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"emo@eclipse.org","type":"Secondary","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/issues/84","name":"https://gitlab.eclipse.org/security/cve-assignment/-/issues/84","refsource":"emo@eclipse.org","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24457","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24457","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Eclipse Foundation","product":"Eclipse OpenMQ","version":"affected 6.5.2 semver","platforms":[]},{"source":"CNA","vendor":"Eclipse Foundation","product":"Eclipse OpenMQ","version":"affected 6.6.0 6.9.0 semver","platforms":[]},{"source":"CNA","vendor":"Eclipse Foundation","product":"Eclipse GlassFish","version":"affected 7.0.26 semver","platforms":[]},{"source":"CNA","vendor":"Eclipse Foundation","product":"Eclipse GlassFish","version":"affected 7.1.0 7.1.1 semver","platforms":[]},{"source":"CNA","vendor":"Eclipse Foundation","product":"Eclipse GlassFish","version":"affected 8.0.0 8.0.2 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Camilo G. AkA Dedalo (DeepSecurity Perú)","lang":"en"}],"nvd_cpes":[{"cve_year":"2026","cve_id":"24457","vulnerable":"1","versionEndIncluding":"6.5.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eclipse","cpe5":"openmq","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"24457","cve":"CVE-2026-24457","epss":"0.006160000","percentile":"0.461860000","score_date":"2026-08-09","updated_at":"2026-08-10 00:07:38"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-24457","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-06T16:00:31.715526Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-03-06T16:11:32.915Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Eclipse OpenMQ","vendor":"Eclipse Foundation","versions":[{"lessThan":"6.5.2","status":"affected","version":"0","versionType":"semver"},{"lessThan":"6.9.0","status":"affected","version":"6.6.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Eclipse GlassFish","vendor":"Eclipse Foundation","versions":[{"lessThan":"7.0.26","status":"affected","version":"0","versionType":"semver"},{"lessThan":"7.1.1","status":"affected","version":"7.1.0","versionType":"semver"},{"lessThan":"8.0.2","status":"affected","version":"8.0.0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Camilo G. AkA Dedalo (DeepSecurity Perú)"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>An unsafe parsing of OpenMQ's configuration in OpenMQ versions &lt;6.5.2 and &lt;6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2.</p>"}],"value":"An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-27","description":"CWE-27 Path Traversal: 'dir/../../filename'","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-05T08:00:11.450Z","orgId":"e51fbebd-6053-4e49-959f-1b94eeb69a2c","shortName":"eclipse"},"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/issues/84"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}}},"cveMetadata":{"assignerOrgId":"e51fbebd-6053-4e49-959f-1b94eeb69a2c","assignerShortName":"eclipse","cveId":"CVE-2026-24457","datePublished":"2026-03-05T16:27:30.984Z","dateReserved":"2026-01-23T11:07:26.456Z","dateUpdated":"2026-08-05T08:00:11.450Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-03-05 19:16:02","lastModifiedDate":"2026-08-05 08:16:32","problem_types":["CWE-22","CWE-27","CWE-22 CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","CWE-27 CWE-27 Path Traversal: 'dir/../../filename'"],"metrics":{"cvssMetricV31":[{"source":"emo@eclipse.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-06T16:00:31.715526Z","id":"CVE-2026-24457","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eclipse:openmq:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1","matchCriteriaId":"D0C54C08-8788-4481-97CC-EAFFC7702412"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"24457","Ordinal":"1","Title":"CVE-2026-24457","CVE":"CVE-2026-24457","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"24457","Ordinal":"1","NoteData":"An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2.","Type":"Description","Title":"CVE-2026-24457"}]}}}