Apache Camel 4.15.0 < 4.18.0 Authentication Bypass (CVE-2026-23552)

The version of Apache Camel on the remote host is 4.15.0 prior to 4.18.0. It is, therefore, affected by an authentication bypass vulnerability: - The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. A token issued by one...

CVE-2026-23552

Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. A token issued by one Keycloak realm is silently accepted by a policy...

CVE-2026-23552

creationtimestamp| type| source ---|---|--- 2026-02-18 17:14:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mf5ldukpm72z 2026-02-23 17:10:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfk5fpxip22f 2026-02-23 17:10:50+00:00| seen|...