CVE-2026-78165

CVE-2026-78165 — camel-spring-redis: unfiltered JDK deserialization of Redis payloads Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-spring-redis, when no serializer option is configured, built a bare JdkSerializationRedisSerializer with...

CVE-2026-78165

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

EUVD-2026-104221

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

CVE-2026-78165

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

CVE-2026-78165: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was...

Apache Camel deserialization injection vulnerability

Apache Camel versions prior to 2.11.0 through 4.18.5, as well as versions from 4.19.0 through 4.22.1, have security vulnerabilities. These vulnerabilities stem from the Apache Camel Spring Redis component using JdkSerializationRedisSerializer when a serialization option is not configured...

Exploit for CVE-2026-78165

CVE-2026-78165 — camel-spring-redis: unfiltered JDK deserializ...

PT-2026-117330

Name of the Vulnerable Software and Affected Versions Apache Camel versions 2.11.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description An issue exists in the Apache Camel Spring Redis component where untrusted data is deserialized. The RedisConfiguration.getSerializer method...