CVE-2026-27172

The camel-consul component in Apache Camel is vulnerable to CWE-502 (Deserialization of Untrusted Data) due to the ConsulRegistry class. The ConsulRegistryUtils.deserialize method reads Java-serialized values from a Consul KV store and passes them to ObjectInputStream.readObject() without an Obje...

EUVD-2026-25815

The ConsulRegistry in the camel-consul component class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method read Java-serialized values from the Consul KV store and passed them to ObjectInputStream.readObject without configuring an ObjectInputFilte...