Exploit for Deserialization of Untrusted Data in Apache Camel

camel-hazelcast Default-Instance Unsafe Deserialization Reprod...

org.apache.camel.karaf:camel-hazelcast (>=4.7.0, <=4.14.7), org.apache.camel.karaf:camel-hazelcast-test (>=4.7.0, <=4.14.7) +6 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.0.0, <=4.14.7)

org.apache.camel:camel-hazelcast MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 - org.apache.karaf.cellar.samples.camel.hazelcast:consumer 4.4.8 - org.apache.karaf.cellar.samples.camel.hazelcast:producer 4.4.8 Source cves: CVE-2026-43865 Source advisory:...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: GHSA-XWW8-MXQW-M84W...

CVE-2026-43865

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

CVE-2026-43865

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: MEND:CVE-2026-43865...