Improperly Controlled Modification Of Dynamically-Determined Object Attributes

🗓️ 06 May 2026 08:41:04Reported by Veracode Vulnerability DatabaseType

Apache Camel header injection via Constrained Application Protocol query parameters with no filtering enables arbitrary command.

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for CVE-2026-33453	27 Apr 202618:21	–	githubexploit
ATTACKERKB	CVE-2026-33453	27 Apr 202609:58	–	attackerkb
Circl	CVE-2026-33453	26 Apr 202619:01	–	circl
CNNVD	Apache Camel 安全漏洞	27 Apr 202600:00	–	cnnvd
CVE	CVE-2026-33453	27 Apr 202609:58	–	cve
Cvelist	CVE-2026-33453 Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution	27 Apr 202609:58	–	cvelist
EUVD	EUVD-2026-25816	27 Apr 202609:58	–	euvd
Github Security Blog	Apache camel-coap allows header injection that can lead to remote code execution	27 Apr 202612:30	–	github
NCSC	Vulnerabilities handled in Apache Camel	29 Apr 202608:12	–	ncsc
NVD	CVE-2026-33453	27 Apr 202611:16	–	nvd

Vulners

Node

apache camel-coapRange4.14.0–4.14.5java

apache camel-componentdslRange4.14.0–4.14.5java

apache camel-endpointdslRange4.14.0–4.14.5java

Source	Link
github	www.github.com/apache/camel/pull/22146
camel	www.camel.apache.org/security/CVE-2026-33453.html
github	www.github.com/apache/camel/commit/05cffa5ec05ff2ec3c50a77825625da6e426e7a8
github	www.github.com/apache/camel/pull/22147
github	www.github.com/apache/camel/commit/3926ab2b7745e36da2cd8e0dc019018bc415aff9
github	www.github.com/apache/camel/commit/e074c01a719cccf3b1c2efbd2ff31e60fd6220ce
github	www.github.com/apache/camel/pull/22148
openwall	www.openwall.com/lists/oss-security/2026/04/26/3
issues	www.issues.apache.org/jira/browse/CAMEL-23222
github	www.github.com/advisories/GHSA-695c-x5gc-94gj

23 May 2026 05:47Current

6Medium risk

Vulners AI Score6

CVSS 3.110

EPSS0.05133

SSVC