CVE-2026-79984

CVE-2026-79984 — camel-mina-sftp: consumer builds the remote path from the server's listing without containment Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the mina-sftp consumer — which derives from the sameRemoteFileConsumer base class as the other remote-file...

CVE-2026-40473

camel-mina MinaConverter.toObjectInput Unsafe Deserialization Reproducer CVE-2026-40473 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-mina component, tracked as CVE-2026-40473. The MinaConverter.toObjectInputIoBuffer type converter wraps the received bytes...

CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure exception written over the socket Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Mina consumer wroteexchange.getException straight back over the socket to the remote peer when processing of an exchange...

Exploit for CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure...

CVE-2026-79984

The Apache Camel mina-sftp component is vulnerable to a Path Traversal (CWE-22) vulnerability because it fails to perform lexical normalization or containment checks when building remote paths from server directory listings. When polling a directory, the component concatenates the configured dire...

CVE-2026-79984 Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...

CVE-2026-79984 Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...

CVE-2026-79984 Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...

Exploit for CVE-2026-79984

CVE-2026-79984 — camel-mina-sftp: consumer builds the remote p...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-mina MinaConverter.toObjectInput Unsafe Deserialization...

org.apache.camel.karaf:camel-mina (>=4.14.5, <=4.14.7), org.apache.camel.springboot:camel-mina-starter (>=4.14.0, <=4.14.7) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.14.0, <=4.14.7)

org.apache.camel:camel-mina MAVEN version =4.14.0, =4.14.5, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890712...

org.apache.camel.springboot:camel-mina-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.19.0, <=4.20.0)

org.apache.camel:camel-mina MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890712...

org.apache.camel.karaf:camel-mina (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-mina-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.15.0, <=4.18.2)

org.apache.camel:camel-mina MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17890712...

org.apache.camel.springboot:camel-mina-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.19.0, <=4.20.0)

org.apache.camel:camel-mina MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-mina (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-mina-starter (>=4.18.0, <=4.18.2) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.18.0, <=4.18.2)

org.apache.camel:camel-mina MAVEN version =4.18.0, =4.18.1, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-mina (>=4.14.5, <=4.14.7), org.apache.camel.springboot:camel-mina-starter (>=4.14.0, <=4.14.7) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.14.0, <=4.14.7)

org.apache.camel:camel-mina MAVEN version =4.14.0, =4.14.5, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.springboot:camel-mina-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.19.0, <=4.20.0)

org.apache.camel:camel-mina MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-mina (>=4.14.5, <=4.14.7), org.apache.camel.springboot:camel-mina-starter (>=4.14.0, <=4.14.7) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.14.0, <=4.14.7)

org.apache.camel:camel-mina MAVEN version =4.14.0, =4.14.5, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-mina (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-mina-starter (>=4.18.0, <=4.18.2) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.18.0, <=4.18.2)

org.apache.camel:camel-mina MAVEN version =4.18.0, =4.18.1, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: GHSA-8H6P-JVHF-9HCR...

org.apache.camel.karaf:camel-mina (>=4.14.5, <=4.14.7), org.apache.camel.springboot:camel-mina-starter (>=4.14.0, <=4.14.7) potentially affected by CVE-2026-42527 via org.apache.camel:camel-mina (>=4.14.0, <=4.14.7)

org.apache.camel:camel-mina MAVEN version =4.14.0, =4.14.5, =4.14.0, =4.14.7 Source cves: CVE-2026-42527 Source advisory: MEND:CVE-2026-42527...