CVE-2026-34197: Apache ActiveMQ improper input validation affecting Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Security scanners may identify Aria Operations for Logs as vulnerable to CVE-2026-34197 (Apache ActiveMQ Improper Input Validation)

Environment

• Aria Operations for Logs 8.x / 8.18.x
• Component: Bundled Apache ActiveMQ library

Resolution

VMware By Broadcom is aware of CVE-2026-34197.

Refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Should you require further information contact Broadcom Support.