Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apache CamelApache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46588

Apache CamelApache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46587

Apache CamelApache Camel: langchain4j-tools: filter tool argument headers against declared parameters

Risk 54
Severity
7.3
First published (updated )
CVE-2026-49042

Apache CamelApache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

Risk 54
Severity
7.3
First published (updated )
CVE-2026-43866

Apache CamelApache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46592
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)

Risk 54
Severity
8.2
First published (updated )
CVE-2026-46591

Apache CamelApache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

Risk 82
Severity
8.8
First published (updated )
CVE-2026-46590

Apache CamelApache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46585

Apache CamelApache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46457

Apache CamelApache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Risk 75
Severity
8.1
First published (updated )
CVE-2026-43865
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Risk 75
Severity
8.1
First published (updated )
CVE-2026-42527

Apache CamelApache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

Risk 75
Severity
8.1
First published (updated )
CVE-2026-40859

Apache CamelApache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling control over internal behaviour

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55994

Apache CamelApache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55993

Apache CamelApache Camel Vertx Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers

Risk 46
Severity
7.5
First published (updated )
CVE-2026-46726
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelThe ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegi…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2463183

Apache CamelThe camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2463180

Apache CamelWhen authentication is enabled on the Apache Camel embedded HTTP server or embedded management serve…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2463178

Apache CamelPath Traversal

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2463176

Apache CamelApache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository

Risk 84
Severity
8.8
First published (updated )
CVE-2026-40858
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP

Risk 84
Severity
8.8
First published (updated )
CVE-2026-40473

Apache CamelApache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager

Risk 75
Severity
7.8
First published (updated )
CVE-2026-40048

Apache CamelApache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

Risk 58
Severity
8.2
First published (updated )
CVE-2026-40022

Apache CamelApache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store

Risk 84
Severity
8.8
First published (updated )
CVE-2026-27172

Apache CamelApache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB

Risk 60
Severity
8.8
EPSS
0.07%
First published (updated )
CVE-2026-25747
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.camel:camel-coreApache Camel issue on ExchangeCreatedEvent

Risk 46
Severity
7.5
First published (updated )
CVE-2024-22371

maven/org.apache.camel:camel-sqlApache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

Risk 53
Severity
7.8
EPSS
0.04%
First published (updated )
CVE-2024-22369

ORACLE Communications Diameter Intelligence HubInput Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2020-11971

debian/htmlunitCode Injection

Risk 78
Severity
8.1
First published (updated )
CVE-2020-5529

Apache CamelSSRF

Risk 42
Severity
7.4
First published (updated )
CVE-2017-5643
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203