CVE-2026-85243

CVE-2026-85243 — camel-crypto-pgp: integrity-verification downgrade legacy packet skips the check Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the PGP data format's unmarshal verified the modification detection code only when the message used the OpenPGP...

CVE-2026-85243

A flaw was found in the Apache Camel Crypto PGP Pretty Good Privacy component. A remote attacker capable of intercepting or altering network traffic can tamper with encrypted messages without detection by sending legacy data packets that omit integrity protection. This issue occurs because the...

org.apache.camel.karaf:camel-crypto-pgp (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-crypto (3.13.0) +6 more potentially affected by CVE-2026-85243 via org.apache.camel:camel-crypto-pgp (>=4.7.0, <=4.18.4)

org.apache.camel:camel-crypto-pgp MAVEN version =4.7.0, =4.7.0, =3.14.0, =3.14.0, =3.14.0, =4.7.0, =4.18.4 Source cves: CVE-2026-85243 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429955...

org.apache.camel.quarkus:camel-quarkus-crypto-pgp (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-crypto-pgp-deployment (>=3.35.0, <=3.39.0) +2 more potentially affected by CVE-2026-85243 via org.apache.camel:camel-crypto-pgp (>=4.19.0, <=4.22.0)

org.apache.camel:camel-crypto-pgp MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85243 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429955...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value via the unmarshal method in the Crypto PGP component. An attacker can modify encrypted data in transit or supply a legacy symmetrically encrypted OpenPGP packet, which has no modification...

CVE-2026-85243

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

org.apache.camel.karaf:camel-crypto-pgp (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-crypto-pgp (>=3.29.0, <=3.33.3) +3 more potentially affected by CVE-2026-85243 via org.apache.camel:camel-crypto-pgp (>=4.15.0, <=4.18.4)

org.apache.camel:camel-crypto-pgp MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-85243 Source advisory: MEND:CVE-2026-85243...

CVE-2026-85243 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

CVE-2026-85243 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

EUVD-2026-104185

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

CVE-2026-85243

The Apache Camel camel-crypto-pgp component is vulnerable to an integrity verification downgrade due to improper validation of integrity check values (CWE-354). The unmarshal() function only verified modification detection codes for specific OpenPGP symmetrically encrypted integrity protected dat...

CVE-2026-85243

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

CVE-2026-85243 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

org.apache.camel.quarkus:camel-quarkus-crypto-pgp (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-crypto-pgp-deployment (>=3.35.0, <=3.39.0) +2 more potentially affected by CVE-2026-85243 via org.apache.camel:camel-crypto-pgp (>=4.19.0, <=4.22.0)

org.apache.camel:camel-crypto-pgp MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85243 Source advisory: MEND:CVE-2026-85243...

Exploit for CVE-2026-85243

CVE-2026-85243 — camel-crypto-pgp: integrity-verification down...

PT-2026-117345

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

CVE-2026-85243: Improper Validation of Integrity Check Value

Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...

Apache Camel encryption issue vulnerabilities

The Apache Camel Crypto PGP component versions prior to 4.18.5 versions 4.0.0 and 4.19.0 prior to 4.22.1 have a security vulnerability related to encryption. This vulnerability stems from improper validation of integrity checks. The unmarshal method only validates the modification detection code...