Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache CamelApache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46588

Apache CamelApache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46587

Apache CamelApache Camel: langchain4j-tools: filter tool argument headers against declared parameters

Risk 54
Severity
7.3
First published (updated )
CVE-2026-49042

oss-secCVE-2026-46588: Apache Camel: CouchDB: Non-Camel-pfixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

First published (updated )
https://seclists.org/oss-sec/2026/q3/73

Apache CamelApache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

Risk 54
Severity
7.3
First published (updated )
CVE-2026-43866
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter

Risk 90
Severity
9.8
First published (updated )
CVE-2026-43867

Apache CamelApache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46592

Apache CamelApache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injection (incomplete remediation of CVE-2025-66169)

Risk 54
Severity
8.2
First published (updated )
CVE-2026-46591

Apache CamelApache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

Risk 82
Severity
8.8
First published (updated )
CVE-2026-46590

Apache CamelApache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the full-text search query

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46585
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

Risk 20
Severity
3.7
First published (updated )
CVE-2026-46584

Apache CamelApache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46457

Apache CamelApache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

Risk 89
Severity
9.8
First published (updated )
CVE-2026-46456

Apache CamelApache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

Risk 86
Severity
9.8
First published (updated )
CVE-2026-46455

Apache CamelApache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers

Risk 86
Severity
9.8
First published (updated )
CVE-2026-46454
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the Elasticsearch query and operation

Risk 27
Severity
5.3
First published (updated )
CVE-2026-46453

Apache CamelApache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Risk 75
Severity
8.1
First published (updated )
CVE-2026-43865

Apache CamelApache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Risk 75
Severity
8.1
First published (updated )
CVE-2026-42527

Apache CamelApache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

Risk 75
Severity
8.1
First published (updated )
CVE-2026-40859

Apache CamelApache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Risk 66
Severity
9.1
First published (updated )
CVE-2026-40047
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel AWS2 SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components

Risk 90
Severity
9.8
First published (updated )
CVE-2026-56140

Apache CamelApache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

Risk 30
Severity
5.3
First published (updated )
CVE-2026-56139

Apache CamelApache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling control over internal behaviour

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55994

Apache CamelApache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55993

Apache CamelApache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is accepted

Risk 90
Severity
9.8
First published (updated )
CVE-2026-53913
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

Risk 30
Severity
5.3
First published (updated )
CVE-2026-49365

Apache CamelApache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour

Risk 30
Severity
5.3
First published (updated )
CVE-2026-49099

Apache CamelApache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic

Risk 30
Severity
5.3
First published (updated )
CVE-2026-49098

Apache CamelApache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users

Risk 42
Severity
6.5
First published (updated )
CVE-2026-49097

Apache CamelApache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour

Risk 42
Severity
6.5
First published (updated )
CVE-2026-49086
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203