CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure exception written over the socket Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Mina consumer wroteexchange.getException straight back over the socket to the remote peer when processing of an exchange...

CVE-2026-85246

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

Exploit for CVE-2026-85246

CVE-2026-85246 — camel-mina: consumer information disclosure...

CVE-2026-85246

The Apache Camel Mina component is vulnerable to information disclosure (CWE-209) because it writes exchange.getException() directly back to the remote peer when processing fails. Depending on the codec, this leaks the exception's class name and message (textline codec) or the serialized exceptio...

CVE-2026-85246 Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...

PT-2026-117347

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException straight back over...