CVE-2026-84176

The Apache Camel camel-platform-http-vertx component is vulnerable to a Permissive Cross-domain Policy with Untrusted Domains (CWE-942). The createCorsHandler() function incorrectly sets Access-Control-Allow-Credentials: true outside the origin check. When camel.server.cors.origins is unset, the ...

CVE-2026-84176 Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...