Exploit for Improper Input Validation in Apache Camel

camel-nats Inbound Header Injection Reproducer CVE-2026-46457...

Exploit for Insufficient Session Expiration in Apache Camel

camel-keycloak Missing ISACTIVE Check — Expired Tokens Accept...

Exploit for Argument Injection in Apache Camel

─── CVE-2026-40047 ─── 🏴 AMN SECURITY 🏴 مركز أب...

Exploit for Improper Input Validation in Apache Camel

camel-cometd Inbound Bayeux Header Injection Reproducer CVE-2...

Exploit for Authorization Bypass Through User-Controlled Key in Apache Camel

camel-elasticsearch-rest-client Unprefixed-Header Injection Re...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-pqc AWS Secrets Manager Key-Metadata Unsafe Deserializat...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-jms Forged DefaultExchangeHolder Filter-Bypass Reproduce...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-hazelcast Default-Instance Unsafe Deserialization Reprod...

Exploit for Deserialization of Untrusted Data in Apache Camel

Permissive Default ObjectInputFilter — DNS Side-Channel Reprod...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-jms JMS ObjectMessage Unsafe Deserialization Reproducer...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-netty-http / camel-vertx-http HTTP-Response Unsafe Deser...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-infinispan Remote Aggregation Repository Unsafe Deserial...

Sensitive Information Exposure

Apache Camel Undertow Component is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper handling of exception responses, where processing errors return full Java stack traces instead of suppressing them, allowing attackers to obtain sensitive information such as...

Improper Authentication

Apache Camel is vulnerable to Improper Authentication. The vulnerability is due to missing authentication for critical functions, where the KeycloakSecurityPolicy defaults to not verifying the access token, and an invalid token is accepted, allowing unauthenticated access to protected routes...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-mina MinaConverter.toObjectInput Unsafe Deserialization...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP2)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.2.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

Exploit for Improper Handling of Case Sensitivity in Apache Camel

Case-Variant Camel Header Injection Reproducer CVE-2026-40453...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-pqc FileBasedKeyLifecycleManager Unsafe Deserialization...

Exploit for CVE-2026-40047

camel-docling CLI Argument Injection / Path Traversal Reproduc...

CVE-2026-49365

A flaw was found in the Apache Camel Netty HTTP component. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed request that triggers an exception during route processing. Due to a misconfiguration where muteException is set to false by default, the system...