Is CVE-2026-34197 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-34197

Apply the vendor-released cumulative patch SOI EP2, which upgrades the ActiveMQ version for SOI Core to 5.19.5. The patch also upgrades SOI management scripts, OpenJDK version 11, and ActiveMQ client libraries in the WildFly module. Follow general security practices including network segmentation, firewall configuration, and restricting unauthorized access to process control systems.

Quick answers

What is CVE-2026-34197?: Apply the vendor-released cumulative patch SOI EP2, which upgrades the ActiveMQ version for SOI Core to 5.19.5. The patch also upgrades SOI management scripts, OpenJDK version 11, and ActiveMQ client libraries in the WildFly module. Follow general security practices including network segmentation, firewall configuration, and restricting unauthorized access to process control systems.
How severe is CVE-2026-34197?: high, CVSS 8.8
Is CVE-2026-34197 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-34197 be mitigated?: Apply the vendor-released cumulative patch SOI EP2, which upgrades the ActiveMQ version for SOI Core to 5.19.5. The patch also upgrades SOI management scripts, OpenJDK version 11, and ActiveMQ client libraries in the WildFly module. Follow general security practices including network segmentation, firewall configuration, and restricting unauthorized access to process control systems.

CVSS

8.8

Vendor

Hitachi Energy

Published

Oct 7, 2026 · 02:32

Patch

Unknown / not confirmed

Affected products

SOI

Mitigation

Critical Remote Code Execution Vulnerability in Hitachi Energy SOI

Hitachi Energy has disclosed a high-severity Remote Code Execution vulnerability in the Apache ActiveMQ component of its SOI product. The flaw, tracked as CVE-2026-34197, stems from improper control of code generation in the Jolokia JMX-HTTP bridge. An authenticated attacker can exploit the default access policy to execute arbitrary code on the broker's JVM, potentially compromising confidentiality, integrity, and availability. The vulnerability affects SOI versions 2.0.0 through 2.2.0 and has been assigned a CVSS v3 base score of 8.8 (HIGH).

12m

CVE-2026-34197

Quick answers

Related News

Critical Remote Code Execution Vulnerability in Hitachi Energy SOI