4 matches found
CVE-2026-85243
CVE-2026-85243 — camel-crypto-pgp: integrity-verification downgrade legacy packet skips the check Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the PGP data format's unmarshal verified the modification detection code only when the message used the OpenPGP...
CVE-2026-85243
The Apache Camel camel-crypto-pgp component is vulnerable to an integrity verification downgrade due to improper validation of integrity check values (CWE-354). The unmarshal() function only verified modification detection codes for specific OpenPGP symmetrically encrypted integrity protected dat...
CVE-2026-85243 Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure
Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal verified the modification detection code only when the message was an OpenPGP symmetrically encrypted...
