CVE-2026-22886 - Vulnerability Analysis

Overview

OpenMQ contains a broken authentication caused by default administrative credentials (admin/admin) with no mandatory password change, letting remote attackers authenticate as admin and gain full control, exploit requires access to management service port.

Severity & Score

Impact

Remote attackers can authenticate as admin and gain full control over administrative features, leading to complete system compromise.

Mitigation

Change default credentials and enforce mandatory password change on first use or update to latest version with this enforcement.

References

• https://gitlab.eclipse.org/security/cve-assignment/-/issues/85

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner