org.apache.camel.karaf:camel-hazelcast (>=4.7.0, <=4.14.7), org.apache.camel.karaf:camel-hazelcast-test (>=4.7.0, <=4.14.7) +6 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.0.0, <=4.14.7)

org.apache.camel:camel-hazelcast MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 - org.apache.karaf.cellar.samples.camel.hazelcast:consumer 4.4.8 - org.apache.karaf.cellar.samples.camel.hazelcast:producer 4.4.8 Source cves: CVE-2026-43865 Source advisory:...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892565...

org.apache.camel.quarkus:camel-quarkus-hazelcast (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-hazelcast-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.19.0, <=4.20.0)

org.apache.camel:camel-hazelcast MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-43865 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892565...

GHSA-XWW8-MXQW-M84W Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

Apache Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

org.apache.camel.karaf:camel-hazelcast (>=4.7.0, <=4.14.7), org.apache.camel.karaf:camel-hazelcast-test (>=4.7.0, <=4.14.7) +6 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.0.0, <=4.14.7)

org.apache.camel:camel-hazelcast MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 - org.apache.karaf.cellar.samples.camel.hazelcast:consumer 4.4.8 - org.apache.karaf.cellar.samples.camel.hazelcast:producer 4.4.8 Source cves: CVE-2026-43865 Source advisory:...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: GHSA-XWW8-MXQW-M84W...

org.apache.camel.quarkus:camel-quarkus-hazelcast (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-hazelcast-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.19.0, <=4.20.0)

org.apache.camel:camel-hazelcast MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-43865 Source advisory: GHSA-XWW8-MXQW-M84W...

org.apache.camel.quarkus:camel-quarkus-hazelcast (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-hazelcast-deployment (>=3.35.0, <=3.36.0) +2 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.19.0, <=4.20.0)

org.apache.camel:camel-hazelcast MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-43865 Source advisory: OSV:GHSA-XWW8-MXQW-M84W...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: OSV:GHSA-XWW8-MXQW-M84W...

org.apache.camel.karaf:camel-hazelcast (>=4.7.0, <=4.14.7), org.apache.camel.karaf:camel-hazelcast-test (>=4.7.0, <=4.14.7) +6 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.0.0, <=4.14.7)

org.apache.camel:camel-hazelcast MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 - org.apache.karaf.cellar.samples.camel.hazelcast:consumer 4.4.8 - org.apache.karaf.cellar.samples.camel.hazelcast:producer 4.4.8 Source cves: CVE-2026-43865 Source advisory:...

CVE-2026-43865

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

CVE-2026-43865

Apache Camel's camel-hazelcast component is vulnerable to remote code execution (RCE) due to insecure deserialization of untrusted data. When Camel creates a Hazelcast instance using its default configuration (i.e., no user-supplied instance, URI, or bean), it fails to apply a Java deserializatio...

CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

EUVD-2026-41826

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

CVE-2026-43865

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

CVE-2026-43865 Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configuration that applies no Java deserialization filter. When Camel builds the Hazelcast Config itself - that is, when no...

org.apache.camel.karaf:camel-hazelcast (>=4.7.0, <=4.14.7), org.apache.camel.karaf:camel-hazelcast-test (>=4.7.0, <=4.14.7) +6 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.0.0, <=4.14.7)

org.apache.camel:camel-hazelcast MAVEN version =4.0.0, =4.7.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 - org.apache.karaf.cellar.samples.camel.hazelcast:consumer 4.4.8 - org.apache.karaf.cellar.samples.camel.hazelcast:producer 4.4.8 Source cves: CVE-2026-43865 Source advisory:...

org.apache.camel.karaf:camel-hazelcast (>=4.18.1, <=4.18.2), org.apache.camel.karaf:camel-hazelcast-test (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-43865 via org.apache.camel:camel-hazelcast (>=4.15.0, <=4.18.2)

org.apache.camel:camel-hazelcast MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-43865 Source advisory: MEND:CVE-2026-43865...