EUVD-2026-25791

🗓️ 27 Apr 2026 08:23:20Reported by EUVDType

Upgrade to Camel 4.20.0 to fix case-insensitive header filtering; JMS strategies remain vulnerable.

Reporter	Title	Published	Views	Family All 32
ATTACKERKB	CVE-2026-47323	19 May 202612:25	–	attackerkb
ATTACKERKB	CVE-2026-40453	27 Apr 202608:23	–	attackerkb
Chainguard	CVE-2026-40453 vulnerabilities	23 May 202607:17	–	cgr
Circl	CVE-2026-40453	26 Apr 202619:06	–	circl
CNNVD	Apache Camel 安全漏洞	27 Apr 202600:00	–	cnnvd
CVE	CVE-2026-40453	27 Apr 202608:23	–	cve
Cvelist	CVE-2026-40453 Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injection	27 Apr 202608:23	–	cvelist
Github Security Blog	Apache Camel has an incomplete fix for CVE-2025-27636	27 Apr 202609:34	–	github
NCSC	Vulnerabilities handled in Apache Camel	29 Apr 202608:12	–	ncsc
NVD	CVE-2026-40453	27 Apr 202609:16	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "f491fa6b-f978-36c3-b1e8-d373d8f13f3d",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "027d4f04-20c6-3e79-aa88-8060736540fa",
        "product": {
          "name": "Apache Camel CoAP"
        },
        "product_version": "4.15.0 <4.18.2"
      },
      {
        "id": "036df485-c8c9-3f44-a422-68d9ef1ece51",
        "product": {
          "name": "Apache Camel JMS"
        },
        "product_version": "3.0.0 <4.14.6"
      },
      {
        "id": "34719a1a-bac0-37f2-abdc-e4fe6ad1f983",
        "product": {
          "name": "Apache Camel JMS"
        },
        "product_version": "4.15.0 <4.18.2"
      },
      {
        "id": "576221cf-82dd-31dc-9578-e7344561a963",
        "product": {
          "name": "Apache Camel JMS"
        },
        "product_version": "4.19.0 <4.20.0"
      },
      {
        "id": "c9540595-bf16-3ac0-9726-b6971ecce2b6",
        "product": {
          "name": "Apache Camel CoAP"
        },
        "product_version": "3.0.0 <4.14.6"
      },
      {
        "id": "e16b066d-c705-3b17-8f38-2d3d312e5cda",
        "product": {
          "name": "Apache Camel Google PubSub"
        },
        "product_version": "4.15.0 <4.18.2"
      },
      {
        "id": "e692ebf9-790b-3662-b5a3-7a11578b1c4f",
        "product": {
          "name": "Apache Camel CoAP"
        },
        "product_version": "4.19.0 <4.20.0"
      },
      {
        "id": "efc6a6cf-11b3-39ca-9c49-d24c1443f458",
        "product": {
          "name": "Apache Camel Google PubSub"
        },
        "product_version": "4.19.0 <4.20.0"
      },
      {
        "id": "fb73ab00-2bd4-3cae-9260-8f01ab3a4291",
        "product": {
          "name": "Apache Camel Google PubSub"
        },
        "product_version": "3.0.0 <4.14.6"
      }
    ]
  }
]

Source	Link
camel	www.camel.apache.org/security/CVE-2026-40453.html

27 Apr 2026 08:23Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.9

EPSS0.00228

SSVC