Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Apache Camel has an incomplete fix for CVE-2025-27636

🗓️ 27 Apr 2026 09:34:39Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 8 Views

Apache Camel CVE-2025-27636 fix incomplete; upgrade to 4.20.0, or 4.14.6/4.18.2 for LTS.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Improper Handling of Case Sensitivity in Apache Camel
9 Mar 202509:42
–githubexploit
GithubExploit		Exploit for Improper Neutralization of Internal Special Elements in Apache Camel
23 Oct 202509:54
–githubexploit
Akamai Blog		Detecting and Mitigating the Apache Camel Vulnerabilities
11 Mar 202516:00
–akamaiblog
ATTACKERKB		CVE-2026-47323
19 May 202612:25
–attackerkb
ATTACKERKB		CVE-2026-40453
27 Apr 202608:23
–attackerkb
ATTACKERKB		CVE-2026-33454
27 Apr 202609:42
–attackerkb
Tenable Nessus		Apache Camel 3.10.0 < 3.22.4 / 4.8.x < 4.8.5 / 4.10.x < 4.10.2 Message Header Injection (CVE-2025-27636)
18 Mar 202500:00
–nessus
BDU FSTEC		The vulnerability of the Default Header Filtering component in the Apache Camel framework, which is related to insufficient registry checks, allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.
14 Mar 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the HeaderHandler component in the Java framework of Apache Camel allows a attacker to compromise the integrity and accessibility of the protected information.
2 Apr 202500:00
–bdu_fstec
Chainguard		CVE-2026-40453 vulnerabilities
23 May 202607:17
–cgr
Rows per page
Vulners
Node
org.apache.camelcamel-sjmsRange4.19.0–4.20.0maven
OR
org.apache.camelcamel-sjmsRange4.15.0–4.18.2maven
OR
org.apache.camelcamel-sjmsRange3.0.0–4.14.6maven
OR
org.apache.camelcamel-jmsRange4.19.0–4.20.0maven
OR
org.apache.camelcamel-jmsRange4.15.0–4.18.2maven
OR
org.apache.camelcamel-jmsRange3.0.0–4.14.6maven
OR
org.apache.camelcamel-google-pubsubRange4.19.0–4.20.0maven
OR
org.apache.camelcamel-google-pubsubRange4.15.0–4.18.2maven
OR
org.apache.camelcamel-google-pubsubRange3.0.0–4.14.6maven
OR
org.apache.camelcamel-coapRange4.19.0–4.20.0maven
OR
org.apache.camelcamel-coapRange4.15.0–4.18.2maven
OR
org.apache.camelcamel-coapRange3.0.0–4.14.6maven

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 May 2026 13:10Current
7.7High risk
Vulners AI Score7.7
CVSS 3.19.9
EPSS0.51725
SSVC
CWE-178
Apache CamelCVE 2025 27636header filteringcase variant headersremote code executionlong term supportversion upgrade
8