CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

org.apache.camel.karaf:camel-knative-http (>=4.18.1, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.29.0, <=3.33.3) +6 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-knative-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

CVE-2026-84180 Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

org.apache.camel.quarkus:camel-quarkus-integration-test-knative (>=3.35.0, <=3.39.0), org.apache.camel.quarkus:camel-quarkus-knative (>=3.35.0, <=3.39.0) +5 more potentially affected by CVE-2026-84180 via org.apache.camel:camel-knative-http (>=4.20.0, <=4.22.0)

org.apache.camel:camel-knative-http MAVEN version =4.20.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 Source cves: CVE-2026-84180 Source advisory: MEND:CVE-2026-84180...

CVE-2026-84180

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

CVE-2026-84180

The camel-knative component in Apache Camel (versions 4.0.0 before 4.18.5 and 4.19.0 before 4.22.1) is vulnerable to information disclosure via unmuted consumer exceptions. When a consumer-side exchange fails, the Knative HTTP consumer writes the resulting exception—including class names, stack t...

EUVD-2026-104211

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

CVE-2026-84176

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

io.camelbee:camelbee-quarkus-core (>=3.2.1, <=4.1.0), io.camelbee:camelbee-quarkus-security (>=3.2.1, <=4.1.0) +58 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =3.38.0, =3.38.0, =3.38.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-84176 Source advisory: MEND:CVE-20...

io.camelbee:camelbee-quarkus-core (>=2.0.5, <=3.1.2), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +51 more potentially affected by CVE-2026-84176 via org.apache.camel:camel-platform-http-vertx (>=4.15.0, <=4.18.4)

org.apache.camel:camel-platform-http-vertx MAVEN version =4.15.0, =2.0.5, =2.0.5, =0.3.0, =1.0, =1.0, =0.7.1, =0.7.1, =0.7.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.3 and more Source cves: CVE-2026-84176 Source advisory: MEND:CVE-2026-84176https://vulners.com/me...

CVE-2026-84176

The Apache Camel camel-platform-http-vertx component is vulnerable to a Permissive Cross-domain Policy with Untrusted Domains (CWE-942). The createCorsHandler() function incorrectly sets Access-Control-Allow-Credentials: true outside the origin check. When camel.server.cors.origins is unset, the ...

CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

EUVD-2026-104214

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:itests-netty-http (4.22.0) +7 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-netty-http MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 - org.openehealth.ipf.tutorials:ipf-tutorials-basic 6.0-m1 - org.openehealth.ipf.tutorials:ipf-tutorials-config 6.0-m1 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

CVE-2026-80343 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-80343 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.4)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-80343 Source advisory: MEND:CVE-2026-80343...

CVE-2026-80343 Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...

CVE-2026-80343

Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a...