CVE-2026-71300

A flaw was found in Apache Camel Atmosphere Websocket. This improper input validation vulnerability allows a remote attacker to inject specific Exchange headers, such as websocket.connectionKey.list, which are not properly filtered. By manipulating these headers, an attacker can take control of t...

WebSocket Header Injection

Apache Camel Atmosphere Websocket component is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered websocket.connectionKey and websocket.connectionKey.list headers controlling WebSocket message dispatch, allowing an external sender to suppress or redirect messages to a...