Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV

CVE-2023-46604

  1. First PoC
  2. 7 days →KEV
  3. 845 days →First cited attacker
  4. 58 days →Metasploit

Signals

Exploited in the wild
Yesadded 2023-11-02 · due 2023-11-23 · known ransomware use. An observation, not a forecast.
EPSS · 30-day forecast
99.9%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
not stated by sourcesNo NVD record yet.
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

42 known · links only

GitHub PoCs · by trust, then stars40

  1. SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ ↗Trust ok 100

    Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

    ★ 126 · created 2023-11-03

  2. Catherines77/ActiveMQ-EXPtools ↗Trust ok 100

    Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

    ★ 86 · created 2026-04-20

  3. Arlenhiack/ActiveMQ-RCE-Exploit ↗Trust ok 100

    ActiveMQ RCE (CVE-2023-46604) 回显利用工具

    ★ 44 · created 2024-03-05

  4. evkl1d/CVE-2023-46604 ↗Trust ok 100

    ★ 41 · created 2023-11-04

  5. trganda/ActiveMQ-RCE ↗Trust ok 100

    CVE-2023-46604

    ★ 28 · created 2023-10-26

  6. duck-sec/CVE-2023-46604-ActiveMQ-RCE-pseudoshell ↗Trust ok 100

    This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.

    ★ 19 · created 2023-11-12

  7. justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp ↗Trust ok 100

    CVE-2023-46604 Apache ActiveMQ RCE exp 基于python

    ★ 5 · created 2023-11-08

  8. NKeshawarz/CVE-2023-46604-RCE ↗Trust ok 100

    ★ 4 · created 2023-11-18

  9. vulncheck-oss/cve-2023-46604 ↗Trust ok 100

    A go-exploit for Apache ActiveMQ CVE-2023-46604

    ★ 4 · created 2024-04-17

  10. h3x3h0g/ActiveMQ-RCE-CVE-2023-46604-Write-up ↗Trust ok 100

    ★ 3 · created 2023-11-09

  11. dcm2406/CVE-Lab ↗Trust ok 100

    Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

    ★ 2 · created 2023-12-07

  12. LiritoShawshark/CVE-2023-46604_ActiveMQ_RCE_Recurrence ↗Trust ok 100

    CVE-2023-46604环境复现包

    ★ 2 · created 2023-11-16

  13. mrpentst/CVE-2023-46604 ↗Trust ok 100

    Exploit for CVE-2023-46604

    ★ 2 · created 2023-12-09

  14. pulentoski/CVE-2023-46604 ↗Trust ok 100

    El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ (CVE-2023-46604)

    ★ 2 · created 2024-05-31

  15. RockyDesigne/SSP-Assignment-3-RCEYouLater ↗Trust ok 100

    A PoC for CVE-2023-46604 written as part of SPS class for the Advanced Cyber Security master's at UPB.

    ★ 2 · created 2026-01-04

  16. minhangxiaohui/ActiveMQ_CVE-2023-46604 ↗Trust ok 100

    PY

    ★ 1 · created 2023-11-20

  17. skrkcb2/CVE-2023-46604 ↗Trust ok 100

    ★ 1 · created 2025-02-27

  18. stegano5/ExploitScript-CVE-2023-46604 ↗Trust ok 100

    ★ 1 · created 2024-02-14

  19. vaishnavucv/Project-Vuln-Detection-N-Mitigation_101 ↗Trust ok 100

    Vulnerability Detection and Mitigation Apache ActiveMQ | Security Architectures and Systems Administration - on - Apache ActiveMQ Deserialization Remote Code Execution (RCE) – CVE-2023-46604

    ★ 1 · created 2025-09-08

  20. aelshimony-cloud/OpenWire-CVE-2023-46604-Investigation ↗Trust ok 100

    ★ 0 · created 2026-06-20

  21. Bhanunamikaze/ActiveMQ-CVE-2023-46604 ↗Trust ok 100

    Exploit POC for Apache ActiveMQ CVE-2023-46604

    ★ 0 · created 2026-09-01

  22. CCIEVoice2009/CVE-2023-46604 ↗Trust ok 100

    ★ 0 · created 2025-05-04

  23. CrackerCat/ActiveMQ_RCE_Pro_Max ↗Trust ok 100

    CVE-2023-46604

    ★ 0 · created 2023-11-20

  24. cuanh2333/CVE-2023-46604 ↗Trust ok 100

    ★ 0 · created 2024-10-16

  25. CyberCTF/vulhub-activemq-cve-2023-46604 ↗Trust ok 100

    Vulhub activemq/CVE-2023-46604: ActiveMQ 5.17.3 OpenWire RCE, run with Isoloom

    ★ 0 · created 2026-10-08

  26. dcm2406/CVE-2023-46604 ↗Trust ok 100

    ★ 0 · created 2023-12-16

  27. KlaasStessens/CVE-2023-46604 ↗Trust ok 100

    Exploitation of CVE-2023-44604. Using a Kali Linux VM (attacker) and a Debian 11 server VM (victim)

    ★ 0 · created 2026-05-01

  28. mkdemir/activemq-lockbit-analysis ↗Trust ok 100

    Apache ActiveMQ (CVE-2023-46604) zafiyetinden LockBit ransomware aşamasına uzanan 419 saatlik sızma vakasının uçtan uca analizi, SIEM korelasyon kuralları ve IOC listesi.

    ★ 0 · created 2026-03-30

  29. mranv/honeypot.rs ↗Trust ok 100

    CVE-2023-46604 (Apache ActiveMQ RCE Vulnerability) and focused on getting Indicators of Compromise.

    ★ 0 · created 2024-05-29

  30. Mudoleto/Broker_ApacheMQ ↗Trust ok 100

    CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

    ★ 0 · created 2023-12-23

  31. Navya240/intel471-threat-hunting-cve-2023-46604 ↗Trust ok 100

    My first hands-on Intel 471 threat hunting workshop experience investigating CVE-2023-46604 using Elastic SIEM, vulnerability intelligence, and post-exploitation detection.

    ★ 0 · created 2026-04-30

  32. nitzanoligo/CVE-2023-46604-demo ↗Trust ok 100

    ★ 0 · created 2023-11-20

  33. pavanaa4k/CVE-2023-46604-LAB ↗Trust ok 100

    Detection, Exploit and Mitigation for CVE 2023 46604.

    ★ 0 · created 2025-11-15

  34. REGGYRAIDER/CVE-2023-46604-RCE ↗Trust ok 100

    CVE-2023-46604-RCE exploit with Linux reverse shell payload

    ★ 0 · created 2026-06-06

  35. sangrok-jeon/CVE-2023-46604-Analysis ↗Trust ok 100

    Apache ActiveMQ OpenWire 역직렬화 RCE 취약점 기술 분석

    ★ 0 · created 2026-03-15

  36. stefanotractor/activemq-cve-2023-46604-lab ↗Trust ok 100

    ★ 0 · created 2026-08-19

  37. thinkycx/activemq-rce-cve-2023-46604 ↗Trust ok 100

    activemq-rce-cve-2023-46604

    ★ 0 · created 2024-04-26

  38. tomasmussi/activemq-cve-2023-46604 ↗Trust ok 100

    Repository to exploit CVE-2023-46604 reported for ActiveMQ

    ★ 0 · created 2023-12-30

  39. trnguyen03/activemq-ids-ips-lab ↗Trust ok 100

    IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

    ★ 0 · created 2026-05-02

  40. vjayant93/CVE-2023-46604-POC ↗Trust ok 100

    POC repo for CVE-2023-46604

    ★ 0 · created 2023-11-15

Fake proof-of-concept repositories have been used to deliver malware to the researchers who run them. The trust verdict is our engine's heuristic over the repository (account age, what it ships, how its stars arrived); it is a reason to read the code first, not a finding about its author.

Metasploit1

  1. Apache ActiveMQ Unauthenticated Remote Code Execution ↗

    This module exploits a deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16.

    ruby · seen 2026-10-18

Nuclei1

  1. Apache ActiveMQ - Remote Code Execution ↗

    Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath. Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.

    yaml · seen 2026-10-18

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.