CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

22 matches found

Kitploit•added 2026/11/01 2:33 a.m.•27 views

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

7.5CVSS7.6AI score0.00659EPSS

SaveExploits1References2

RedHat Linux•added 2026/09/24 7:56 p.m.•23 views

camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References5

Veracode•added 2026/08/13 9:08 a.m.•7 views

Improper Input Validation

Apache Camel NATS component is vulnerable to Improper Input Validation. The vulnerability is due to NatsConsumer copying unfiltered NATS message headers into the Camel Exchange, allowing an attacker who can publish to the consumed subject to inject Camel control headers and influence downstream...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References3Affected Software1

GithubExploit•added 2026/07/14 10:11 a.m.•113 views

Exploit for Improper Input Validation in Apache Camel

camel-nats Inbound Header Injection Reproducer CVE-2026-46457...

7.5CVSS7.5AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 10:35 a.m.•5 views

org.apache.camel.kafkaconnector:camel-nats-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-nats-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-46457 via org.apache.camel:camel-nats (>=4.15.0, <=4.18.2)

org.apache.camel:camel-nats MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46457 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879236...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 10:35 a.m.•8 views

org.apache.camel.kafkaconnector:camel-nats-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-nats-source-kafka-connector (>=4.0.0, <=4.14.5) +5 more potentially affected by CVE-2026-46457 via org.apache.camel:camel-nats (>=4.0.0, <=4.14.7)

org.apache.camel:camel-nats MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46457 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879236...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 10:35 a.m.•8 views

org.apache.camel.quarkus:camel-quarkus-integration-test-nats (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-nats (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-46457 via org.apache.camel:camel-nats (>=4.19.0, <=4.20.0)

org.apache.camel:camel-nats MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46457 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879236...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 9:30 a.m.•5 views

org.apache.camel:camel-nats MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46457 Source advisory: GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 9:30 a.m.•6 views

org.apache.camel:camel-nats MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46457 Source advisory: OSV:GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 9:30 a.m.•8 views

org.apache.camel:camel-nats MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46457 Source advisory: GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 9:30 a.m.•6 views

org.apache.camel:camel-nats MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46457 Source advisory: OSV:GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 9:30 a.m.•7 views

org.apache.camel:camel-nats MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46457 Source advisory: OSV:GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

Github Security Blog•added 2026/07/06 9:30 a.m.•28 views

Apache Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component maps inbound NATS message headers into the Camel Exchange but defaulted its headerFilterStrategy to a bare new DefaultHeaderFilterStrategy with no inbound rules configured NatsConfiguration. With no...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References14Affected Software1

osv_ghsa•added 2026/07/06 9:30 a.m.•27 views

GHSA-7V55-Q9X3-83CJ Apache Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References14

vulnersOsv•added 2026/07/06 9:30 a.m.•4 views

org.apache.camel:camel-nats MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46457 Source advisory: GHSA-7V55-Q9X3-83CJ...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

osv_cve•added 2026/07/06 7:57 a.m.•23 views

CVE-2026-46457 Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References5

vulnersOsv•added 2026/07/06 7:57 a.m.•8 views

org.apache.camel:camel-nats MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46457 Source advisory: MEND:CVE-2026-46457...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 7:57 a.m.•5 views

org.apache.camel:camel-nats MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46457 Source advisory: MEND:CVE-2026-46457...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

vulnersOsv•added 2026/07/06 7:57 a.m.•6 views

org.apache.camel:camel-nats MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46457 Source advisory: MEND:CVE-2026-46457...

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1

EUVD•added 2026/07/06 7:57 a.m.•31 views

EUVD-2026-41831

7.5CVSS7.2AI score0.00659EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by