EUVD-2026-41838

🗓️ 06 Jul 2026 08:06:22Reported by EUVDType

Solr component vulnerability allows SSRF via SolrParam and SolrField headers; upgrade to 4.21.0.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-48203	6 Jul 202608:06	–	attackerkb
BDU FSTEC	The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack	20 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-48203	5 Jul 202620:31	–	circl
CVE	CVE-2026-48203	6 Jul 202608:06	–	cve
Cvelist	CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields	6 Jul 202608:06	–	cvelist
NVD	CVE-2026-48203	6 Jul 202609:16	–	nvd
OSV	CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields	6 Jul 202608:06	–	osv
Positive Technologies	PT-2026-55899	6 Jul 202600:00	–	ptsecurity
Snyk	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	6 Jul 202610:35	–	snyk
Vulnrichment	CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields	6 Jul 202608:06	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "f36e9376-7835-36d0-9dd2-8dff94adc8af",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "654a6b74-89b6-3536-92ad-402976793697",
        "product": {
          "name": "Apache Camel",
          "vendor": {
            "name": "Apache Software Foundation"
          }
        },
        "product_version": "4.15.0 <4.18.3"
      },
      {
        "id": "cc84035d-518d-321f-aff0-358e96ff6ddf",
        "product": {
          "name": "Apache Camel",
          "vendor": {
            "name": "Apache Software Foundation"
          }
        },
        "product_version": "4.19.0 <4.21.0"
      },
      {
        "id": "e9ba1e76-4ec8-3918-9786-4613c35e5f68",
        "product": {
          "name": "Apache Camel",
          "vendor": {
            "name": "Apache Software Foundation"
          }
        },
        "product_version": "4.0.0 <4.14.8"
      }
    ]
  }
]

Source	Link
camel	www.camel.apache.org/security/CVE-2026-48203.html

06 Jul 2026 19:17Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.19.1

EPSS0.0037

SSVC