Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Apache Camel

camel-mail mail.smtp. Header Injection Reproducer CVE-2026...

CVE-2026-46584 Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail Component. The camel-mail producer MailProducer.getSender scanned the outgoing Exchange for message headers in the mail.smtp. / mail.smtps. namespace and, when any were present...

CVE-2026-46584

creationtimestamp| type| source ---|---|--- 2026-07-05 19:26:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwclugmc722 2026-07-09 03:26:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6os2pkk52w 2026-07-16 19:00:07+00:00| seen|...