GHSA-QVC3-6Q9X-95PJ Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely 'Failing Open' vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess, which performs three checks ...

CVE-2026-44936

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials BasicAuth to any URL specified in the helm.repo...

CVE-2026-53913

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely 'Failing Open' vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess, which performs three checks ...

MINI-HP6P-282M-33GC

Bulletin has no description...

MINI-QX3M-362X-X7QH

Bulletin has no description...

MINI-9R3H-CJJF-V44M

Bulletin has no description...

lab-security-exploitable

No d...

MINI-CRR4-WP7W-J6PM

Bulletin has no description...

MINI-XV3W-W5M7-5WM4

Bulletin has no description...

MINI-8P4P-GXP6-HMC6

Bulletin has no description...

MINI-9PHW-47Q4-8C9C

Bulletin has no description...

MINI-28JG-8GMR-J6VQ

Bulletin has no description...

MINI-Q9P6-XG2R-XQH2

Bulletin has no description...

MINI-3G4V-HMP3-FQPG

Bulletin has no description...

CVE-2026-53913 Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is accepted

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely 'Failing Open' vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess, which performs three checks ...

MINI-R6HG-FVX8-R69G

Bulletin has no description...

MINI-9Q57-PJ73-RVC6

Bulletin has no description...

MINI-7V9Q-F4JR-H4HH

Bulletin has no description...

PYSEC-2026-844 Matrix Synapse Authorization Error

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.powerlevels event in force...

EUVD-2026-41829

Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks... with only the subject-exists check and the realm-URL issuer check. Keycloak's...