CVE-2026-53916 | Apache ActiveMQ up to 5.19.7/6.2.6 STOMP NIO Codec buffer overflow

A vulnerability described as critical has been identified in Apache ActiveMQ up to 5.19.7/6.2.6. This affects an unknown function of the component STOMP NIO Codec. The manipulation results in buffer overflow.

This vulnerability was named CVE-2026-53916. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.