CVE-2026-80344

Server-Side Request Forgery SSRF vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an...

Security Bulletin: IBM MQ C client library could allow an authenticated attacker to cause a denial of service by sending a specially crafted message that crashes consuming applications (CVE-2026-14511)

Summary IBM MQ has addressed a potential denial of service issue in the IBM MQ C client library Vulnerability Details CVEID:CVE-2026-14511 DESCRIPTION: IBM MQ could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

Exploit for CVE-2026-84180

CVE-2026-84180 — camel-knative: HTTP consumer information disc...

CVE-2026-11828: Buffer Copy without Checking Size of Input

IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values...

CVE-2026-12343: Uncontrolled Resource Consumption

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

CVE-2026-14511: Allocation of Resources Without Limits or Throttling

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

PT-2026-117509

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations...

PT-2026-117699

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

PT-2026-117170

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send message mobile of the file controllers/simple.php. Such manipulation of the argument user id leads to weak password recovery. The attack can be launched remotely. The exploit has been...

PT-2026-117343

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

PT-2026-117445

The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save new message handler hooked on the init action, which validates only a generic nonce without verifying course enrollment or restricting post id to valid post types. Authenticated...

PT-2026-117516

IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

CVE-2026-80344: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an...

PT-2026-117362

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a gRPC consumer failed, the exception's message was placed into the gRPC status...

Linux Distros Unpatched Vulnerability : CVE-2026-112063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer...

CVE-2026-84180: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

CVE-2026-85315: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a gRPC consumer failed, the exception's message was placed into the gRPC status...

IBM MQ Operator resource management error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 contain a resource management...

Apache Camel code injection vulnerability

Versions of Apache Camel from 4.4.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a code injection vulnerability. This vulnerability arises when the dynamic-router-control endpoint processes subscription or update requests. It involves accessing subscription predicates and expression languages from...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to session mechanisms. This vulnerability arises from the AS2 component storing the signature materials of individual requests in a state that is shared across requests, rather than restricting...