Exploit for Improper Handling of Case Sensitivity in Apache Camel

Case-Variant Camel Header Injection Reproducer CVE-2026-40453...

CVE-2026-40453 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips...

Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.SP2)

An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available RHBQ 3.27.3.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

org.apache.camel.kafkaconnector:camel-coap-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-coap-tcp-kafka-connector (>=0.1.0, <=0.11.5) +9 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-coap (>=3.0.0-m1, <=4.14.5)

org.apache.camel:camel-coap MAVEN version =3.0.0-m1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =4.7.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.0.0, =3.0.0-m1, =3.0.0-rc3 Source cves: CVE-2026-40453 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321638...

org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-google-pubsub-source-kafka-connector (4.18.0) +8 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-google-pubsub (>=4.15.0, <=4.18.1)

org.apache.camel:camel-google-pubsub MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40453 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321639...

org.apache.camel.kafkaconnector:camel-google-pubsub-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (>=1.0.0, <=4.14.5) +14 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-google-pubsub (>=3.0.0-m1, <=4.14.5)

org.apache.camel:camel-google-pubsub MAVEN version =3.0.0-m1, =0.1.0, =1.0.0, =1.0.0, =3.19.0, =4.8.0, =0.9.0, =4.7.0, =4.7.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =1.5.0, =3.0.0, =3.0.0-m1, =3.0.0-rc3 - org.qubership.integration.platform...

org.apache.camel.kafkaconnector:camel-coap-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-coap-tcp-kafka-connector (>=0.1.0, <=0.11.5) +8 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-coap (>=3.0.0, <=4.14.5)

org.apache.camel:camel-coap MAVEN version =3.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =4.7.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.0.0, =4.14.5 Source cves: CVE-2026-40453 Source advisory: OSV:GHSA-JG2M-9X48-3GVJ...

ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0, <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0, <=2.2.0) +81 more potentially affected by CVE-2025-27636 +1 more via org.apache.camel:camel-jms (>=3.0.0, <=4.14.5)

org.apache.camel:camel-jms MAVEN version =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =1.0, =hyte-mq-4.3.7.hyte-43072, =hyte-mq-4.3.7.hyte-43072, =4.4.11.hyte-26354 and more Source cves: CVE-2025-27636, CVE-2026-40453 Source advisory: GHSA-JG2M-9X48-3GVJ...

org.apache.camel.springboot:camel-coap-starter (4.19.0) potentially affected by CVE-2025-27636 +1 more via org.apache.camel:camel-coap (4.19.0)

org.apache.camel:camel-coap MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-coap and may be impacted: - org.apache.camel.springboot:camel-coap-starter 4.19.0 Source cves: CVE-2025-27636, CVE-2026-40453 Source...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.1), io.kaoto.forage:forage-catalog (>=1.0, <=1.1) +42 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-jms (>=4.15.0, <=4.18.1)

org.apache.camel:camel-jms MAVEN version =4.15.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0, =1.1 - org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector 4.18.0 - org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector 4.18.0 -...

org.apache.camel.springboot:camel-google-pubsub-starter (4.19.0) potentially affected by CVE-2026-40453 via org.apache.camel:camel-google-pubsub (4.19.0)

org.apache.camel:camel-google-pubsub MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-google-pubsub and may be impacted: - org.apache.camel.springboot:camel-google-pubsub-starter 4.19.0 Source cves:...