Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel

camel-undertow Rest DSL muteException Stack-Trace Disclosure R...

org.apache.camel.quarkus:camel-quarkus-integration-test-http-grouped (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sap-netweaver (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.20.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

CVE-2026-56139 Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false,...

CVE-2026-56139

creationtimestamp| type| source ---|---|--- 2026-07-05 20:44:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o 2026-07-06 11:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26 2026-07-09 03:54:50+00:00| seen|...