CVE-2026-49098

A flaw was found in the Apache Camel Kafka Component. A remote attacker can exploit an improper input validation vulnerability by manipulating specific Kafka headers, such as kafka.OVERRIDETOPIC, when an HTTP consumer bridges into a Kafka producer. This allows the attacker to redirect messages to...

CVE-2026-49097

The Apache Camel IRC component is vulnerable to a message-header injection flaw (CVE-2026-49097 ). The IrcProducer class uses the irc.sendTo header to determine the destination of outgoing IRC messages. Because this header constant does not use the required Camel prefix, it bypasses the HttpHeade...

CVE-2026-49097

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...