Apache Camel Deserializes Untrusted Data in its LevelDB Component

🗓️ 23 Feb 2026 09:31:23Reported by GitHub Advisory DatabaseType

Untrusted data deserialization in Camel LevelDB enables code execution; upgrade to 4.18.0 (LTS: 4.10.9 or 4.14.5).

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for CVE-2026-25747	9 Feb 202609:37	–	githubexploit
ATTACKERKB	CVE-2026-25747	23 Feb 202608:45	–	attackerkb
ATTACKERKB	CVE-2026-27172	27 Apr 202609:59	–	attackerkb
ATTACKERKB	CVE-2026-40858	27 Apr 202609:38	–	attackerkb
BDU FSTEC	The vulnerability of the DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework allows a attacker to execute arbitrary code.	7 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-25747	18 Feb 202617:24	–	circl
CNNVD	Apache Camel 安全漏洞	23 Feb 202600:00	–	cnnvd
CVE	CVE-2026-25747	23 Feb 202608:45	–	cve
Cvelist	CVE-2026-25747 Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB	23 Feb 202608:45	–	cvelist
NVD	CVE-2026-25747	23 Feb 202609:17	–	nvd

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25747
camel	www.camel.apache.org/security/CVE-2026-25747.html
github	www.github.com/oscerd/CVE-2026-25747
openwall	www.openwall.com/lists/oss-security/2026/02/18/6
github	www.github.com/apache/camel/commit/0e3ac39e20416c91af6df2cfce3f7d795e75ad89
github	www.github.com/apache/camel/commit/5f343367f7b25646b7d12be26c3e87381c7a7ecb
github	www.github.com/apache/camel/commit/af2f2e9571b3b03a36b771bd9eb10427886d9636
issues	www.issues.apache.org/jira/browse/CAMEL-22966
github	www.github.com/advisories/GHSA-429q-mrc4-38fr

25 Feb 2026 18:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.8

EPSS0.00903

SSVC