CVE-2026-46592

CVE-2026-46592 — camel-cxf operationName Header Injection SOAP Operation Redirection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Backend SOAP service ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

CVE-2026-85257

CVE-2026-85257 — camel-cxf: SOAP fault information disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, when a route behind a CXF SOAP consumer failed with an exception the service contract does not declare , the exception was described back to the SOAP client...

Exploit for CVE-2026-85257

CVE-2026-85257 — camel-cxf: SOAP fault information disclosure...

de.ikor.sip.foundation:sip-integration-starter (>=3.2.0, <=3.6.2), de.ikor.sip.foundation:sip-soap-starter (>=3.2.0, <=3.6.2) +40 more potentially affected by CVE-2026-85257 via org.apache.camel:camel-cxf-soap (>=4.0.0, <=4.18.4)

org.apache.camel:camel-cxf-soap MAVEN version =4.0.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =2.0.1, =2.0.1, =5.0.0.cr1, =5.0.0.cr1, =5.0.0.cr1, =5.0.0.cr1, =1.3, =1.3, =1.3, =1.3, =1.3, =1.4.1 and more Source cves: CVE-2026-85257 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429362...

io.camelbee:camelbee-quarkus-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-quarkus-security (>=3.2.1, <=4.1.0) +13 more potentially affected by CVE-2026-85257 via org.apache.camel:camel-cxf-soap (>=4.19.0, <=4.22.0)

org.apache.camel:camel-cxf-soap MAVEN version =4.19.0, =3.2.1, =3.2.1, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85257 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429362...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the checkFailure function in the CXF SOAP consumer. An external caller can read internal class and package names and exception messages by sending a SOAP request that triggers an undeclared route failure; if CXF...

io.camelbee:camelbee-quarkus-core (>=2.0.5, <=3.1.2), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +18 more potentially affected by CVE-2026-85257 via org.apache.camel:camel-cxf-soap (>=4.15.0, <=4.18.4)

org.apache.camel:camel-cxf-soap MAVEN version =4.15.0, =2.0.5, =2.0.5, =1.3, =1.3, =1.3, =1.3, =1.3, =4.4.0, =4.18.1, =4.18.1, =4.18.1, =4.18.1, =3.29.0, =3.33.3 and more Source cves: CVE-2026-85257 Source advisory: MEND:CVE-2026-85257...

io.camelbee:camelbee-quarkus-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-quarkus-security (>=3.2.1, <=4.1.0) +13 more potentially affected by CVE-2026-85257 via org.apache.camel:camel-cxf-soap (>=4.19.0, <=4.22.0)

org.apache.camel:camel-cxf-soap MAVEN version =4.19.0, =3.2.1, =3.2.1, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.22.0 Source cves: CVE-2026-85257 Source advisory: MEND:CVE-2026-85257...

Apache Camel Code Execution

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

Exploit for Improper Handling of Case Sensitivity in Apache Camel

camel-cxf-rest / camel-cxf / camel-knative-http Header Injecti...

Exploit for Confused Deputy in Apache Camel

camel-cxf operationName Header Injection Reproducer CVE-202...

io.camelbee:camelbee-quarkus-core (3.2.1), io.camelbee:camelbee-quarkus-security (3.2.1) +18 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-common (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-common MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 and more Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879244...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the operationName and operationNamespace headers, which are not properly filtered by the HTTP header filter. An attacker can cause the backend SOAP servi...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879243...

io.camelbee:camelbee-quarkus-core (>=2.0.5, <=3.1.2), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +28 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-common (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cxf-common MAVEN version =4.15.0, =2.0.5, =2.0.5, =4.4.0, =4.18.1, =4.18.1, =4.18.1, =4.18.2 and more Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879244...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the operationName and operationNamespace headers, which are not properly filtered by the HTTP header filter. An attacker can cause the backend SOAP servi...

org.apache.camel.karaf:camel-cxf-spring-all (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-cxf-rest-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-rest (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cxf-spring-rest MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879246...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the operationName and operationNamespace headers, which are not properly filtered by the HTTP header filter. An attacker can cause the backend SOAP servi...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-spring-rest MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879246...

io.kaoto.forage:forage-cxf-starter (1.5.0), org.apache.camel.springboot:camel-cxf-soap-starter (>=4.19.0, <=4.20.0) +1 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-soap (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-spring-soap MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879247...