DeutschShown in its original language — a full translation is planned for a future version.
Apache Camel: Mehrere Schwachstellen
view advisory published 2026-10-15
Ein Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.
01
describes (38)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-91858US | — | Exploit | ||
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECU… | ||||
| CVE-2026-88901US | — | Exploit | ||
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel.
This issue affects Apache Camel: from 4.7.0 before 4.18.5, from 4.19.0 before 4.22.1.
Imp… | ||||
| CVE-2026-85317US | — | Exploit | ||
Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… | ||||
| CVE-2026-85316US | — | Exploit | ||
Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.2… | ||||
| CVE-2026-85315US | — | Exploit | ||
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 b… | ||||
| CVE-2026-85314US | — | Exploit | ||
Improper Input Validation vulnerability in Apache Camel Mail component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
CVE-2026-46584 addre… | ||||
| CVE-2026-85313US | — | Exploit | ||
Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | ||||
| CVE-2026-85312US | — | Exploit | ||
Improper Input Validation vulnerability in Apache Camel Core component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
The saga processor c… | ||||
| CVE-2026-85301US | — | Exploit | ||
Improper Authentication vulnerability in Apache Camel Keycloak component.
This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1.
The security p… | ||||
| CVE-2026-85300US | —OT elevated | Exploit | ||
Incorrect Default Permissions vulnerability in Apache Camel PQC component.
This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1.
When the compone… | ||||
| CVE-2026-85296US | — | Exploit | ||
Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
Signi… | ||||
| CVE-2026-85260US | — | Exploit | ||
Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1… | ||||
| CVE-2026-85257US | — | Exploit | ||
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 be… | ||||
| CVE-2026-85254US | — | Exploit | ||
Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… | ||||
| CVE-2026-85251US | — | Exploit | ||
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 bef… | ||||
| CVE-2026-85250US | — | Exploit | ||
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | ||||
| CVE-2026-85249US | — | Exploit | ||
Improper Input Validation vulnerability in Apache Camel Tika component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
The Tika producer ma… | ||||
| CVE-2026-85248US | — | Exploit | ||
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component.
This issue affects Apache Camel: from 4.12… | ||||
| CVE-2026-85247US | — | Exploit | ||
Improper Certificate Validation vulnerability in Apache Camel Knative component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
When SSL wa… | ||||
| CVE-2026-85246US | — | Exploit | ||
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 b… | ||||
showing 20 of 38
02
references
External citations — patches, advisories, analysis.
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
- Apache Camel security advisory vom 2026-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan