CVE-2026-6857 Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected",
    "packageName": "camel-infinispan",
    "cpes": [
      "cpe:/a:redhat:apache_camel_spring_boot:4.18"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:apache_camel_quarkus:3.33"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Apache Camel 4 for Quarkus 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "camel-infinispan",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:camel_quarkus:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Fuse 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "camel-infinispan",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:jboss_fuse:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 8",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "packageName": "camel-infinispan",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "packageName": "camel-infinispan",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:jbosseapxp"
    ]
  }
]