oscerd/CVE-2026-66908

PoC

Reproducer for CVE-2026-66908 (Apache Camel camel-platform-http-main JWT iss/aud not validated) — standalone camel-main

view exploit source poc_in_githubauthor oscerdpublished 2026-08-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-66908US	—	0.61% (49th)	Exploit	2026-08-24
Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP se…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.