CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException Stack-Trace Disclosure Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Components shown ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...

camel-netty-http Apache Camel Bypass Security

The vulnerability of the camel-netty-http component of the Apache Camel framework is related to deficiencies in the mechanism for handling registry-dependent data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-78164 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429513...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the camel-http-common, camel-http, camel-netty-http, camel-undertow, and camel-vertx-http components. An attacker can supply...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers in the...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-78164 Source advisory:...

Improper Neutralization of Special Elements Used in a Template Engine

Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers i...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430141...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory:...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

CVE-2026-80343 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-78164 Source advisory: MEND:CVE-2026-78164...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-78164 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-78164 Source advisory: MEND:CVE-2026-78164...

Apache Camel input validation vulnerability

Versions of Apache Camel Netty HTTP from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to the camel-netty-http security constraint using case-sensitive matching when comparing the request path with the configure...

Exploit for CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-se...

Apache Camel camel-netty-http 4.22.0 Security Constraint Bypass

Apache Camel camel-netty-http version 4.22.0 contains a security constraint bypass vulnerability. A proof of concept demonstrates that altering a request context-path case can bypass configured authentication and reach a protected route. https://packetstorm.news/download/236141...

PT-2026-121180

Уязвимость компонента camel-netty-http фреймворка Apache Camel связана с недостатками механизма обработки регистрозависимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...