Live › vulnerability › CVE-2016-3088
Go to dashboardApache ActiveMQ's Fileserver web application lets remote attackers upload files with an HTTP PUT and then move them with an HTTP MOVE, so an attacker can place and run arbitrary files. CISA lists this as actively exploited in the wild, and EPSS puts exploitation probability at about 0.985.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apache ActiveMQ | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2016-3088")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.