Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

21 matches found

Kitploit
Kitploit•added 2026/10/19 6:56 p.m.•6 views

CVE-2026-84176

CVE-2026-84176 — camel-platform-http-vertx: CORS credential exposure reflected origin + credentials Runnable proof-of-concept reproducer for the Apache Camel vulnerability where VertxPlatformHttpServerSupport. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check —...

6.5CVSS6.2AI score
SaveExploits1References1
GithubExploit
GithubExploit•added 2026/10/19 8:33 a.m.•16 views

Exploit for CVE-2026-84176

CVE-2026-84176 — camel-platform-http-vertx: CORS credential ex...

6AI score
SaveExploits1
Kitploit
Kitploit•added 2026/10/13 7:29 a.m.•17 views

CVE-2026-40022

camel-platform-http-main Authentication Bypass on Non-Root Context Paths CVE-2026-40022 This project demonstrates an authentication bypass in Apache Camel's camel-platform-http-main component the embedded HTTP / management server of the Camel main runtime, tracked as CVE-2026-40022. When...

8.2CVSS6AI score0.01033EPSS
SaveExploits1
RedHat Linux
RedHat Linux•added 2026/09/24 7:56 p.m.•28 views

org.apache.camel/camel-platform-http-main: org.apache.camel/camel-main: Apache Camel: Improper authentication allows JWT bypass in Platform HTTP Main component

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

7.5CVSS7.1AI score0.0061EPSS
SaveExploits1References5
Snyk
Snyk•added 2026/08/24 8:44 p.m.•20 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the JWTAuthenticationConfigurer in components/camel-platform-http-main/src/main/java/org/apache/camel/component/platform/http/main/authentication/JWTAuthenticationConfigurer.java. An attacker can gain...

8.7CVSS7.1AI score0.0061EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment•added 2026/08/24 4:14 p.m.•11 views

CVE-2026-66908 Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

6.8AI score0.0061EPSS
SaveExploits1References1
GithubExploit
GithubExploit•added 2026/08/24 3:04 p.m.•43 views

Exploit for CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud not...

7.4AI score0.0061EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•2 views

org.apache.camel.karaf:camel-platform-http-main (4.14.5), org.apache.camel.springboot:camel-observability-services-starter (>=4.14.1, <=4.14.5) +11 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.14.1, <=4.14.5)

org.apache.camel:camel-platform-http-main MAVEN version =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.5 Source cves: CVE-2026-40022 Source advisory: OSV:GHSA-27VM-5VPJ-RP5G...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•3 views

org.apache.camel.springboot:camel-observability-services-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +14 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (4.19.0)

org.apache.camel:camel-platform-http-main MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-platform-http-main and may be impacted: - org.apache.camel.springboot:camel-observability-services-starter 4.19.0 -...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•2 views

org.apache.camel.springboot:camel-observability-services-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +14 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (4.19.0)

org.apache.camel:camel-platform-http-main MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-platform-http-main and may be impacted: - org.apache.camel.springboot:camel-observability-services-starter 4.19.0 -...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•3 views

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (1.1) +17 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.18.0, <=4.18.1)

org.apache.camel:camel-platform-http-main MAVEN version =4.18.0, =0.3.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.1 and more Source cves: CVE-2026-40022 Source advisory: GHSA-27VM-5VPJ-RP5G...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•2 views

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (1.1) +17 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.18.0, <=4.18.1)

org.apache.camel:camel-platform-http-main MAVEN version =4.18.0, =0.3.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.1 and more Source cves: CVE-2026-40022 Source advisory: OSV:GHSA-27VM-5VPJ-RP5G...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 12:30 p.m.•3 views

org.apache.camel.karaf:camel-platform-http-main (4.14.5), org.apache.camel.springboot:camel-observability-services-starter (>=4.14.1, <=4.14.5) +11 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.14.1, <=4.14.5)

org.apache.camel:camel-platform-http-main MAVEN version =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.5 Source cves: CVE-2026-40022 Source advisory: GHSA-27VM-5VPJ-RP5G...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 11:13 a.m.•3 views

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.1) +17 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.15.0, <=4.18.1)

org.apache.camel:camel-platform-http-main MAVEN version =4.15.0, =0.3.0, =1.0, =1.0, =4.15.0, =4.15.0, =4.15.0, =4.18.0, =4.15.0, =4.15.0, =4.15.0, =4.17.0, =4.15.0, =4.18.0, =4.15.0, =4.18.1 and more Source cves: CVE-2026-40022 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321645...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 11:13 a.m.•2 views

org.apache.camel.karaf:camel-platform-http-main (4.14.5), org.apache.camel.springboot:camel-observability-services-starter (>=4.14.1, <=4.14.5) +11 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.14.1, <=4.14.5)

org.apache.camel:camel-platform-http-main MAVEN version =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.1, =4.14.5 Source cves: CVE-2026-40022 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321645...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/04/27 11:13 a.m.•3 views

org.apache.camel.springboot:camel-observability-services-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +14 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (4.19.0)

org.apache.camel:camel-platform-http-main MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-platform-http-main and may be impacted: - org.apache.camel.springboot:camel-observability-services-starter 4.19.0 -...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
Mend
Mend•added 2026/04/27 9:40 a.m.•19 views

CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.8CVSS5.9AI score0.01033EPSS
SaveExploits1References16
vulnersOsv
vulnersOsv•added 2026/04/27 9:40 a.m.•3 views

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (1.1) +17 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (>=4.18.0, <=4.18.1)

org.apache.camel:camel-platform-http-main MAVEN version =4.18.0, =0.3.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.0, =4.18.1 and more Source cves: CVE-2026-40022 Source advisory: MEND:CVE-2026-40022...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
Vulnrichment
Vulnrichment•added 2026/04/27 9:40 a.m.•11 views

CVE-2026-40022 Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

5.8AI score0.01033EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv•added 2026/04/27 9:40 a.m.•3 views

org.apache.camel.springboot:camel-observability-services-starter (4.19.0), org.apache.camel:camel-jbang-core (4.19.0) +14 more potentially affected by CVE-2026-40022 via org.apache.camel:camel-platform-http-main (4.19.0)

org.apache.camel:camel-platform-http-main MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-platform-http-main and may be impacted: - org.apache.camel.springboot:camel-observability-services-starter 4.19.0 -...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1
Rows per page
Query Builder