CVE-2026-80344

The camel-as2 component in Apache Camel is vulnerable to Server-Side Request Forgery (SSRF) and credential disclosure (CWE-918, CWE-200) due to an unconstrained asynchronous Message Disposition Notification (MDN) delivery. An attacker can provide a malicious Receipt-Delivery-Option address in an ...