Skip to content
OpenAdvisories

Archive

27 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /27 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-27172 Public exploit

    Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV store

    The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Java-serialized values from the Consul KV store and passed them to ObjectInputStream.readObject…

    Apache Software Foundation Apache Camel org.apache.camel:camel-consul Maven
  • High 8.2
    CVE-2026-40022 Public exploit

    Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

    When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenti…

    Apache Software Foundation Apache Camel Platform HTTP Main org.apache.camel:camel-platform-http-main Maven
  • High 8.8
    CVE-2026-40858 Public exploit

    Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation Repository

    The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache us…

    Apache Software Foundation Apache Camel org.apache.camel:camel-infinispan Maven
  • High 7.8
    CVE-2026-40048 Public exploit

    Apache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManager

    The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key directory using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. The cast to `java.security.…

    Apache Software Foundation Apache Camel PQC org.apache.camel:camel-pqc Maven
  • High 8.8
    CVE-2026-40473 Public exploit

    Apache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP

    The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. When a Camel route uses camel-mina as a TCP or UDP consumer …

    Apache Software Foundation Apache Camel Mina org.apache.camel:camel-mina Maven
  • High 7.3
    CVE-2026-7070 Public exploit

    code-projects Inventory Management System Login sql injection

    A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The expl…

    code-projects Inventory Management System
  • High 7.5
    CVE-2025-69428 Public exploit

    An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subd…

  • High 8.8
    CVE-2026-38934 Public exploit

    Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacke…