oscerd/CVE-2026-42527

PoC

Reproducer for CVE-2026-42527 — Apache Camel permissive default ObjectInputFilter admits java.net.URL, enabling a DNS-based out-of-band side channel

view exploit source poc_in_githubauthor oscerdpublished 2026-07-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-42527US	—	0.67% (52nd)	Exploit	2026-07-06
Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserializ…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.