CVE-2025-54309

CVE-2025-54309 CrushFTP Authentication Bypass Overview CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP that allows unauthorized administrative user creation through AS2 header manipulation. Technical Details Vulnerability Location File : crushftp/server/ServerSessionHTTP.java...

CVE-2026-80344

CVE-2026-80344 — camel-as2: asynchronous MDN SSRF and credential disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the AS2 receiver delivered the asynchronous Message Disposition Notification MDN to an address supplied by the sender the...

CVE-2026-85296

CVE-2026-85296 — camel-as2: cross-partner MDN signing key confusion Runnable proof-of-concept reproducer for the Apache Camel vulnerability where per-request signing material was held in state shared across requests rather than confined to the request being processed. A single ResponseMDN is...

CrushFTP-AS2-Bypass-Research-CVE-2025-54309

CrushFTP AS2 Authentication Bypass Research ⚠️ IMPORTANT: This vulnerability has been patched by CrushFTP as of November 2025. This research is published for educational and defensive purposes only. 📝 NOTE: This research is based on vulnerability patterns similar to CVE-2025-54309. The exact CVE...

camel-as2 Component Bypass Unauthorized Access

The vulnerability of the camel-as2 component in the Java framework Apache Camel is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information...

Exploit for CVE-2026-85296

CVE-2026-85296 — camel-as2: cross-partner MDN signing key conf...

Server-Side Request Forgery

Apache Camel is vulnerable to Server-Side Request Forgery. The vulnerability is due to the AS2 component taking the MDN destination address from the inbound message without validation, where it uses that address as the destination for the outgoing receipt and a remote partner can supply an...

Apache Camel 4.22.0 AS2 MDN Signing Key Confusion

Apache Camel version 4.22.0 AS2 component contains a race condition that can cause Message Disposition Notifications in multi-partner deployments using dynamic keys to be signed with a different partner's private key. https://packetstorm.news/download/236482...

CVE-2026-80344

A flaw was found in Apache Camel's AS2 Applicability Statement 2 component. A remote attacker can trigger Server-Side Request Forgery SSRF by sending a message that specifies an arbitrary destination address for asynchronous delivery receipts. Because the application sends receipts to the...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.35.0, <=3.39.0) +3 more potentially affected by CVE-2026-85296 via org.apache.camel:camel-as2-api (>=4.19.0, <=4.22.0)

org.apache.camel:camel-as2-api MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85296 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21427928...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.18.4), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.18.4) +5 more potentially affected by CVE-2026-85296 via org.apache.camel:camel-as2-api (>=4.0.0, <=4.18.4)

org.apache.camel:camel-as2-api MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.18.4 Source cves: CVE-2026-85296 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21427928...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the ResponseMDN handler in the AS2 component. In a deployment serving multiple trading partners with dynamic per-request keys, ordinary concurrent or successive AS2 requests can cause...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.18.4), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.18.4) +4 more potentially affected by CVE-2026-80344 via org.apache.camel:camel-as2 (>=4.0.0, <=4.18.4)

org.apache.camel:camel-as2 MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-80344 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21246602...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.18.4), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.18.4) +5 more potentially affected by CVE-2026-80344 via org.apache.camel:camel-as2-api (>=4.0.0, <=4.18.4)

org.apache.camel:camel-as2-api MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.0.0, =4.18.4 Source cves: CVE-2026-80344 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21246603...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.35.0, <=3.39.0) +2 more potentially affected by CVE-2026-80344 via org.apache.camel:camel-as2 (>=4.19.0, <=4.22.0)

org.apache.camel:camel-as2 MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 Source cves: CVE-2026-80344 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21246602...

org.apache.camel.quarkus:camel-quarkus-as2 (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-as2-deployment (>=3.35.0, <=3.39.0) +3 more potentially affected by CVE-2026-80344 via org.apache.camel:camel-as2-api (>=4.19.0, <=4.22.0)

org.apache.camel:camel-as2-api MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-80344 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21246603...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the asynchronous MDN delivery process in the camel-as2 component. An attacker can make the AS2 receiver connect to attacker-chosen or internally reachable hosts by sending a message with a malicious...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the asynchronous MDN delivery process in the camel-as2 component. An attacker can make the AS2 receiver connect to attacker-chosen or internally reachable hosts by sending a message with a malicious...

CVE-2026-85296

Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Signing material belonging to an individual request was stored in state that is shared across requests rather than confined ...

CVE-2026-80344

Server-Side Request Forgery SSRF vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an...