Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Camel Mina

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-40473 Public exploit

    Apache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDP

    The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. When a Camel route uses camel-mina as a TCP or UDP consumer …

    Apache Software Foundation Apache Camel Mina org.apache.camel:camel-mina Maven