1088 matches found
CVE-2026-49099 — Updated!
CVE-2026-49099 — camel-salesforce sObjectQuery Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...
SUSE CVE-2026-45760
Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...
Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP3)
An update for Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available RHBQ 3.33.2.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...
The vulnerabilities of the components camel-langchain4j-tools, camel-langchain4j-agent, and camel-spring-ai-tools from the Java framework Apache Camel allow attackers to execute arbitrary code, perform SSRF attacks, or gain read-write access to arbitrary files.
The vulnerability of the components camel-langchain4j-tools, camel-langchain4j-agent, and camel-spring-ai-tools from the Java framework Apache Camel is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code, perform an...
The vulnerability of the Apache Camel JIRA Java framework component allows a malicious individual to gain unauthorized access to read, modify, add, and delete objects.
The vulnerability of the Apache Camel JIRA Java framework involves bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read, modify, add, and delete objects in the target JIRA system...
The vulnerability of the sendEventNotification() and getQueryMap() functions in the WebsocketConsumer class of the camel-atmosphere-websocket component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the sendEventNotification and getQueryMap functions in the WebsocketConsumer class of the camel-atmosphere-websocket component of the Apache Camel framework is related to insufficient validation of input data during the processing of WebSocket request parameters. Exploiting...
Exploit for Server-Side Request Forgery in Apache Camel
camel-iggy User-Header Injection Reproducer CVE-2026-55994...
Exploit for Server-Side Request Forgery in Apache Camel
camel-atmosphere-websocket Header Injection Reproducer CVE-20...
The vulnerability of the components camel-netty-http and camel-undertow in the Apache Camel framework allows attackers to disclose protected information.
The vulnerability of the camel-netty-http and camel-undertow components of the Apache Camel framework is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...
Exploit for Improper Authentication in Apache Camel
camel-keycloak Fail-Open Authentication Bypass Reproducer CVE...
Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel
camel-netty-http / camel-undertow muteException Stack-Trace Di...
The vulnerability of the DaprPubSubConsumer class in the camel-dapr component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...
The vulnerability of the evaluateTopic() function in the KafkaProducer class of the camel-kafka framework from Apache Camel allows a attacker to compromise the confidentiality of the protected information.
The vulnerability of the evaluateTopic function in the KafkaProducer class of the camel-kafka component from the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to compromise the...
The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality and integrity of th...
Exploit for Improper Input Validation in Apache Camel
camel-kafka kafka.OVERRIDETOPIC Header Injection Reproducer...
Exploit for Confused Deputy in Apache Camel
camel-dapr Consumer Routing-Header Override / Confused Deputy...
Exploit for Improper Input Validation in Apache Camel
camel-langchain4j-tools Prompt-Injection → Header-Injection Re...
The vulnerability of the camel-pqc component in the Apache Camel Java framework allows a attacker to execute arbitrary code.
The vulnerability of the camel-pqc component in the Apache Camel Java framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack
The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...
The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework allows a attacker to gain access to read, modify, or delete data.
The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...