CVE-2026-49099

The CVE affects Apache Camel: Salesforce component, where operation parameters (SOQL/SOSL queries, SObject name/id, Apex URL/method, Apex query params) are read from untrusted Exchange headers, bypassing endpoint config due to plain non‑Camel header names. HttpHeaderFilterStrategy blocks only the...

CVE-2026-48205

Summary: CVE-2026-48205 describes an SSRF vulnerability in the Apache Camel DNS component where DNS operation headers can be supplied via non-Camel header names (dns.server, dns.name, dns.domain, dns.type, dns.class, term) because the HTTP header filter is insufficient. This allows an unauthentic...