Exploit for Improper Input Validation in Apache Camel

camel-cometd Inbound Bayeux Header Injection Reproducer CVE-2...

EUVD-2026-41828

Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux CometD message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplie...