CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException Stack-Trace Disclosure Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Components shown ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

camel-netty-http Apache Camel Bypass Security

The vulnerability of the camel-netty-http component of the Apache Camel framework is related to deficiencies in the mechanism for handling registry-dependent data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-78164 Source advisory:...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429513...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers i...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430141...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory:...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

CVE-2026-80343 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

Apache Camel input validation vulnerability

Versions of Apache Camel Netty HTTP from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to the camel-netty-http security constraint using case-sensitive matching when comparing the request path with the configure...

Exploit for CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-se...

Apache Camel camel-netty-http 4.22.0 Security Constraint Bypass

Apache Camel camel-netty-http version 4.22.0 contains a security constraint bypass vulnerability. A proof of concept demonstrates that altering a request context-path case can bypass configured authentication and reach a protected route. https://packetstorm.news/download/236141...

PT-2026-121180

Уязвимость компонента camel-netty-http фреймворка Apache Camel связана с недостатками механизма обработки регистрозависимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

CVE-2026-49365 — Updated!

CVE-2026-49365 — camel-netty-http / camel-undertow muteException Stack-Trace Disclosure Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Components shown ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

Apache Camel Disclosure Protected Information

The vulnerability of the camel-netty-http and camel-undertow components of the Apache Camel framework is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...