Skip to content
OpenAdvisories
High WID-SEC-2026-4006 38 CVEs

Apache Camel: Mehrere Schwachstellen

Published Oct 15, 2026 · Updated Nov 10, 2026 · Revision 4 · de

Vendor: Apache Vendor: Red Hat Product: Camel Product: Enterprise Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Product

Apache Camel ist ein Integrations-Framework, das Enterprise Integration Patterns implementiert.

Vulnerabilities 38

  • Critical 10.0
    CVE-2026-78162 Public exploit

    Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)

    Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it …

    Apache Software Foundation Apache Camel
  • High 8.8
    CVE-2026-78165 Public exploit

    Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads

    Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer…

    Apache Software Foundation Apache Camel
  • High 8.8
    CVE-2026-83531 Public exploit

    Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages

    Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before…

    Apache Software Foundation Apache Camel
  • High 8.2
    CVE-2026-78164 Public exploit

    Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers

    Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components. This issue affects Apache Camel: from 4.0…

    Apache Software Foundation Apache Camel
  • High 8.2
    CVE-2026-80312 Public exploit

    Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors

    Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-oauth processors that guard a route did not stop the exchange when authentication could not…

    Apache Software Foundation Apache Camel
  • High 8.2
    CVE-2026-80343 Public exploit

    Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path Matching

    Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the conf…

    Apache Software Foundation Apache Camel
  • High 8.2
    CVE-2026-80344 Public exploit

    Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address

    Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notifica…

    Apache Software Foundation Apache Camel
  • High 8.2
    CVE-2026-88901 Public exploit

    Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default

    Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affects Apache Camel: from 4.7.0 before 4.18.5, from 4.19.0 before 4.22.1. Improper Restriction of XML External Entity Reference in the Smooks component (camel-smo…

    Apache Software Foundation Apache Camel
  • High 7.5
    CVE-2026-85250 Public exploit

    Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option

    Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. With documentType set to InputSource, XPathBuilder handed the payload st…

    Apache Software Foundation Apache Camel
  • High 7.5
    CVE-2026-85251 Public exploit

    Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host c…

    Apache Software Foundation Apache Camel
  • High 7.4
    CVE-2026-79983 Public exploit

    Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory …

    Apache Software Foundation Apache Camel
  • High 7.4
    CVE-2026-79984 Public exploit

    Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a dir…

    Apache Software Foundation Apache Camel
  • High 7.4
    CVE-2026-79985 Public exploit

    Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache Camel: from 4.2.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory …

    Apache Software Foundation Apache Camel
  • High 7.4
    CVE-2026-79986 Public exploit

    Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a di…

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-84176 Public exploit

    Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection

    Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler() set Access-Control-Allow-Credentials: …

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-85249 Public exploit

    Apache Camel: Camel-Tika Header Injection via Unfiltered Document Metadata

    Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Tika producer mapped every metadata key parsed out of the submitted document onto the Exchange as…

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-85254 Public exploit

    Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing

    Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compa…

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-85296 Public exploit

    Apache Camel: Camel-AS2 Cross-Partner Signing Key Confusion via Shared Per-Request State

    Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Signing material belonging to an individual request was stored in state that is shared…

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-85314 Public exploit

    Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)

    Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addressed mail headers reaching the Exchange without passing through a header filter, …

    Apache Software Foundation Apache Camel
  • Medium 6.5
    CVE-2026-91858 Public exploit

    Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

    FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECURE_PROCESSING before running an identity transform over the body. On the JDK's …

    Apache Software Foundation Apache Camel
  • Medium 6.1
    CVE-2026-84178 Public exploit

    Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow

    Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The authorization code callback did not carry a state parameter binding it to the authoriza…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-78163 Public exploit

    Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

    Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel:…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-84181 Public exploit

    Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse

    Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the cur…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-85243 Public exploit

    Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure

    Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal() verified the modification detection code only when the message w…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-85245 Public exploit

    Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target

    Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Thrift data format unmarshalled incoming data into the shared defaultInstance o…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-85247 Public exploit

    Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore

    Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When SSL was enabled on the Knative HTTP client but no truststore was configured, the client…

    Apache Software Foundation Apache Camel
  • Medium 5.9
    CVE-2026-85248 Public exploit

    Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. The producer held a single java.sec…

    Apache Software Foundation Apache Camel
  • Medium 5.5
    CVE-2026-85260 Public exploit

    Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default

    Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-mllp component carries a logPhi option that governs whether HL7 payl…

    Apache Software Foundation Apache Camel
  • Medium 5.5
    CVE-2026-85300 Public exploit

    Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions

    Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the proces…

    Apache Software Foundation Apache Camel
  • Medium 5.3
    CVE-2026-84180 Public exploit

    Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions

    Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the…

    Apache Software Foundation Apache Camel
  • Medium 5.3
    CVE-2026-85246 Public exploit

    Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions

    Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exc…

    Apache Software Foundation Apache Camel
  • Medium 5.3
    CVE-2026-85257 Public exploit

    Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions

    Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception th…

    Apache Software Foundation Apache Camel
  • Medium 5.3
    CVE-2026-85315 Public exploit

    Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions

    Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a gRPC consumer failed, the exception's messag…

    Apache Software Foundation Apache Camel
  • Medium 4.8
    CVE-2026-85301 Public exploit

    Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim

    Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1. The security processor validated the issuer of an introspected token only when the introspection r…

    Apache Software Foundation Apache Camel
  • Medium 4.8
    CVE-2026-85312 Public exploit

    Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header

    Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The saga processor consulted a header named Long-Running-Action to decide which saga an exchange belo…

    Apache Software Foundation Apache Camel
  • Medium 4.8
    CVE-2026-85316 Public exploit

    Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching

    Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The component decided whether an endpoint ran in proxy mode by testing whet…

    Apache Software Foundation Apache Camel
  • Medium 4.8
    CVE-2026-85317 Public exploit

    Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache

    Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The OAuth2 client token cache is global to the JVM, and its key omitted several o…

    Apache Software Foundation Apache Camel
  • Medium 4.3
    CVE-2026-85313 Public exploit

    Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set

    Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Setting enableCORS on a Jetty endpoint installed Jetty's CrossOriginFilt…

    Apache Software Foundation Apache Camel

Revision history

  1. #4

    Neue Updates von Red Hat aufgenommen

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-109667

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-104187, EUVD-2026-104188, EUVD-2026-104186, EUVD-2026-104185, EUVD-2026-104184, EUVD-2026-104183, EUVD-2026-104211, EUVD-2026-104209, EUVD-2026-104213, EUVD-2026-104214, EUVD-2026-104215, EUVD-2026-104216, EUVD-2026-104217, EUVD-2026-104218, EUVD-2026-104221, EUVD-2026-104222, EUVD-2026-104223, EUVD-2026-104198, EUVD-2026-104197, EUVD-2026-104196, EUVD-2026-104195, EUVD-2026-104194, EUVD-2026-104192, EUVD-2026-104191, EUVD-2026-104190, EUVD-2026-104189, EUVD-2026-104212, EUVD-2026-104220, EUVD-2026-104201, EUVD-2026-104200, EUVD-2026-104203, EUVD-2026-104208, EUVD-2026-104204, EUVD-2026-104205, EUVD-2026-104206, EUVD-2026-104199, EUVD-2026-104224

  4. #1

    Initiale Fassung

References