CVE-2026-43865

camel-hazelcast Default-Instance Unsafe Deserialization Reproducer CVE-2026-43865 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-hazelcast component, tracked as CVE-2026-43865. When Camel builds the Hazelcast Config itself — i.e. when no user-supplied...

CLEANSTART-2026-SD37188 Security fix for CVE-2025-67721 applied in: apache-nifi 2.7.2-r7, hazelcast 5.7.0-r1, spark-sc213-jdk17-py311 4.1.1-r2, trino 479-r0

CVE-2025-67721 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BD80531 Security fix for CVE-2026-48059 applied in: hazelcast 5.7.0-r1, keycloak 26.3.5-r3, keycloak 26.4.2-r0, keycloak 26.4.7-r4, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.3-r2, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-48059 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DF40874 Security fix for CVE-2026-56822 applied in: cassandra 5.0.8-r1, hazelcast 5.7.0-r1

CVE-2026-56822 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QT54780 Security fix for CVE-2026-56820 applied in: cassandra 5.0.8-r1, hazelcast 5.7.0-r1

CVE-2026-56820 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZL96278 Security fix for CVE-2026-56821 applied in: cassandra 5.0.8-r1, hazelcast 5.7.0-r1

CVE-2026-56821 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LD69815 Security fix for CVE-2026-56817 applied in: apache-hive 4.0.1-r8, hazelcast 5.7.0-r1

CVE-2026-56817 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AJ11768 Security fix for CVE-2026-59920 applied in: hazelcast 5.7.0-r1

Security vulnerability affects the hazelcast package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XB76941 Security fix for CVE-2026-44891 applied in: hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r8

CVE-2026-44891 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YA82976 Security fix for CVE-2026-50011 applied in: hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-50011 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OQ51978 Security fix for CVE-2026-48006 applied in: hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-48006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GH03249 Security fix for CVE-2026-44250 applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-44250 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW13513 Security fix for CVE-2026-44890 applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-44890 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PX19443 Security fix for ghsa-g7hg-vrcf-mvmr applied in: cassandra 5.0.8-r1, hazelcast 5.7.0-r1

ghsa-g7hg-vrcf-mvmr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VQ70387 Security fixes in hazelcast 5.7.0-r1

Package hazelcast version 5.7.0-r1 fixes 107 vulnerabilities: ghsa-j3rv-43j4-c7qm, ghsa-rmj7-2vxq-3g9f, ghsa-5gvw-p9qm-jgwh, ghsa-5jmj-h7xm-6q6v, ghsa-5hh8-q8hv-fr38...

CLSA-2026-1769990937 TuxCare security update for com.hazelcast (3 CVEs)

TuxCare rebuilt 9 com.hazelcast packages to address 3 CVEs. Fixed in 4.2.8-tuxcare.1...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-hazelcast Default-Instance Unsafe Deserialization Reprod...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the managed Hazelcast instance creation paths in HazelcastDefaultComponentgetOrCreateHzInstance, HazelcastUtilnewInstance, HazelcastAggregationRepositorydoStart, and...

GHSA-XWW8-MXQW-M84W Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...