Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1)

🗓️ 03 Sep 2026 18:34:09Reported by RedHatType

redhat🔗 access.redhat.com👁 15 Views

RHBQ 3.33.3.SP1 fixes DoS, TLS hostname bypass, and credential disclosure in multiple components.

Reporter	Title	Published	Views	Family All 646
IBM Security Bulletins	Security Bulletin: Due to the use of Apache HttpComponents Client 5.4, IBM Sterling Control Center is vulnerable to Improper Certificate Validation (CVE-2026-71290)	22 Sep 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty	11 Sep 202616:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026	31 Aug 202610:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Missing Release of Resource after Effective Lifetime and Improper Certificate Validation due to HttpClient (CVE-2026-64607 & CVE-2026-71290)	4 Sep 202612:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses httpclient5-5.6.3.jar which is vulnerable to CVE-2026-71290	14 Sep 202611:49	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in httpclient5-5.5.jar may affect IBM Infosphere Change Data Capture (CVE-2026-64607)	14 Sep 202610:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty and Milo	16 Sep 202607:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	15 Sep 202609:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	7 Sep 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607]	21 Aug 202620:02	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-12894
access	www.access.redhat.com/security/cve/CVE-2026-17615
access	www.access.redhat.com/security/cve/CVE-2026-18710
access	www.access.redhat.com/security/cve/CVE-2026-62243
access	www.access.redhat.com/security/cve/CVE-2026-64607
access	www.access.redhat.com/security/cve/CVE-2026-66257
access	www.access.redhat.com/security/cve/CVE-2026-66273
access	www.access.redhat.com/security/cve/CVE-2026-66274
access	www.access.redhat.com/security/cve/CVE-2026-71290
access	www.access.redhat.com/security/updates/classification/

11 Sep 2026 10:21Current

6Medium risk

Vulners AI Score6

CVSS 3.19.1

CVSS 48.7

EPSS0.00774

SSVC

RHBQ 3.33.3.SP1 TLS hostname bypass connection leak DoS credential disclosure Apache HttpComponents Netty Qpid Proton-J