Skip to content
OpenAdvisories
High WID-SEC-2026-0445 2 CVEs

Apache Camel: Mehrere Schwachstellen

Published Feb 17, 2026 · Updated Jul 5, 2026 · Revision 4 · de-DE

Vendor: Apache Product: Camel Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.

Product

Apache Camel ist ein Integrations-Framework, das Enterprise Integration Patterns implementiert.

Vulnerabilities 2

  • Critical 9.1
    CVE-2026-23552 Public exploit

    Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy

    Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.  The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm…

    Apache Software Foundation Apache Camel org.apache.camel:camel-keycloak Maven
  • High 8.8
    CVE-2026-25747 Public exploit

    Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB

    Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInput…

    Apache Software Foundation Apache Camel LevelDB org.apache.camel:camel-leveldb Maven

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-41847

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-7591

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-7391

  4. #1

    Initiale Fassung

References