CVE-2023-46604

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 20, 2026 12 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

94.44%

probability

This CVE has a 94.44% probability of being exploited in the next 30 days.

0% Top 100.0th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-502 · Deserialization of Untrusted Data CWE-664 · Improper Control of a Resource Through its Lifetime CWE-913 · Improper Control of Dynamically-Managed Code Resources

Exploits & PoC

SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

126

evkl1d/CVE-2023-46604

PoC CVE-2023-46604 — evkl1d/CVE-2023-46604

duck-sec/CVE-2023-46604-ActiveMQ-RCE-pseudoshell

This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe de

justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp

CVE-2023-46604 Apache ActiveMQ RCE exp 基于python

vulncheck-oss/cve-2023-46604

A go-exploit for Apache ActiveMQ CVE-2023-46604

5 repos — triés par ⭐ Rechercher sur GitHub ↗

GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability

TheHackerNews

CISA flags Apache ActiveMQ flaw as actively exploited in attacks

BleepingComputer Apr 17, 2026

Actively exploited Apache ActiveMQ flaw impacts 6,400 servers

BleepingComputer Apr 21, 2026

New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

TheHackerNews

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

TheHackerNews

Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

TheHackerNews

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

TheHackerNews

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

TheHackerNews

RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

TheHackerNews

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

TheHackerNews

Oracle Critical Patch Update, January 2025 Security Update Review

Qualys Jan 23, 2025

Oracle Patch Update, January 2024 Security Update Review

Qualys Jan 17, 2024

Signal Intelligence

Confidenceⓘ

92%

EPSS 94.44%

Mentions 12

Last Seen Apr 21, 2026

CNA Information

Analyst Note

CVE-2023-46604 is a critical Apache ActiveMQ RCE vulnerability (CVSS 10.0) with multiple confirmed in-the-wild exploitation reports from mid-2023, including active malware deployment (GoTitan botnet, Kinsing, HelloKitty ransomware) before patches were widely available. The 'recently disclosed' language and rapid exploitation timeline confirm zero-day status.