oscerd/CVE-2026-40453

PoC

Reproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)

view exploit source poc_in_githubauthor oscerdpublished 2026-07-08catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-40453US	—	2.10% (82nd)	Exploit	2026-04-27
The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'C…
CVE-2025-27636US	—	97.1% (100th)	Exploit	2025-03-09
Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4,…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.