564 matches found
CVE-2026-101259
A flaw was found in the Apache Camel CoAP Constrained Application Protocol component. When a CoAP consumer fails to construct a response after a route completes, internal exception details are returned directly to the client in an error response payload rather than being suppressed. A remote...
CVE-2026-103653
A flaw was found in the Qt Constrained Application Protocol CoAP module. A remote attacker can trigger an out-of-bounds read during message parsing by sending a malformed CoAP message. Successful exploitation primarily causes the application to crash, resulting in a Denial of Service DoS, or may...
CVE-2026-103653
An out-of-bounds read vulnerability in the Qt CoAP message parsing QCoapInternalReply::createFromFrame of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash loss of availability or to continue operating on incorrect data potential loss of...
EUVD-2026-115724
An out-of-bounds read vulnerability in the Qt CoAP message parsing QCoapInternalReply::createFromFrame of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash loss of availability or to continue operating on incorrect data potential loss of...
CVE-2026-103653 Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP
An out-of-bounds read vulnerability in the Qt CoAP message parsing QCoapInternalReply::createFromFrame of the Qt CoAP module. Processing a malformed CoAP message can cause an application using Qt CoAP to crash loss of availability or to continue operating on incorrect data potential loss of...
CVE-2026-103653
The Qt CoAP module contains an out-of-bounds read vulnerability within the QCoapInternalReply::createFromFrame() function during message parsing. Processing a malformed CoAP message can lead to an application crash, resulting in a loss of availability , or cause the application to continue operat...
CVE-2026-33453
camel-coap Header Injection → RCE Vulnerability Reproducer CVE-2026-33453 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-coap component, tracked as CVE-2026-33453. An unauthenticated attacker who can send a single CoAP UDP packet can inject...
CVE-2026-101259
CVE-2026-101259 — camel-coap: the consumer sent the exception message to the CoAP client Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, when the CoAP consumer could not build its response once the route had completed , CamelCoapResource caught the resulting excepti...
Exploit for CVE-2026-101259
CVE-2026-101259 — camel-coap: the consumer sent the exception...
Apache Camel 4.22.1 CoAP Information Disclosure
Apache Camel version 4.22.1 camel-coap consumers disclose exception messages to remote CoAP clients when response construction fails after route completion. The proof of concept demonstrates disclosure through failed body and header conversion. https://packetstorm.news/download/238164...
org.apache.camel.karaf:camel-coap (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-coap (>=3.2.0, <=3.33.3) +3 more potentially affected by CVE-2026-101259 via org.apache.camel:camel-coap (>=4.0.0, <=4.18.4)
org.apache.camel:camel-coap MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-101259 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21816661...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the CamelCoapResource in the CoAP consumer. An attacker can read internal class and package names, values such as file paths, and backend details carried in exception messages by sending a CoAP request that make...
org.apache.camel.quarkus:camel-quarkus-coap (>=3.35.0, <=3.40.0), org.apache.camel.quarkus:camel-quarkus-coap-deployment (>=3.35.0, <=3.40.0) +1 more potentially affected by CVE-2026-101259 via org.apache.camel:camel-coap (>=4.19.0, <=4.22.1)
org.apache.camel:camel-coap MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.22.1 Source cves: CVE-2026-101259 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21816661...
CVE-2026-101259
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caug...
EUVD-2026-109667
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caug...
CVE-2026-101259
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caug...
org.apache.camel.quarkus:camel-quarkus-coap (>=3.35.0, <=3.40.0), org.apache.camel.quarkus:camel-quarkus-coap-deployment (>=3.35.0, <=3.40.0) +1 more potentially affected by CVE-2026-101259 via org.apache.camel:camel-coap (>=4.19.0, <=4.22.1)
org.apache.camel:camel-coap MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.22.1 Source cves: CVE-2026-101259 Source advisory: MEND:CVE-2026-101259...
CVE-2026-101259 Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caug...
org.apache.camel.karaf:camel-coap (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-coap (>=3.2.0, <=3.33.3) +3 more potentially affected by CVE-2026-101259 via org.apache.camel:camel-coap (>=4.0.0, <=4.18.4)
org.apache.camel:camel-coap MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-101259 Source advisory: MEND:CVE-2026-101259...
CVE-2026-101259 Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caug...