apache camel

Name: apache camel
Brand: apache

productUS

cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical11high4medium1low

updated 2026-10-27

vulnerabilities (86)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27636US	—	97.1% (100th)	Exploit	4.8.5	2025-03-09	3 versions
CVE-2026-47323US	—	19.6% (97th)	Exploit	4.18.2	2026-05-19	2 versions
CVE-2018-8041US	medium5.3	9.59% (95th)	Exploit	no fix	2018-09-17	3 versions
CVE-2026-33453US	—	9.18% (95th)	Exploit	no fix	2026-04-27	3 versions
CVE-2026-40047US	—	2.43% (84th)	Exploit	4.18.3	2026-07-06	4.15.0 → 4.18.3
CVE-2026-40453US	—	2.10% (82nd)	Exploit	4.14.6	2026-04-27	3 versions
CVE-2026-40860US	—	1.74% (78th)	Exploit	4.14.7	2026-04-27	3 versions
CVE-2026-33454US	—	1.49% (74th)	Exploit	4.18.1	2026-04-27	2 versions
CVE-2026-40858US	—	1.31% (70th)	Exploit	4.18.2	2026-04-27	3 versions
CVE-2026-25747US	high8.8	1.26% (69th)	Exploit	4.18.0	2026-02-23	3 versions
CVE-2026-27172US	—	1.23% (69th)	Exploit	4.14.6	2026-04-27	2 versions
CVE-2026-40473US	—	1.19% (68th)	Exploit	4.18.2	2026-04-27	3 versions
CVE-2026-53913US	—OT elevated	1.08% (65th)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-43865US	—	0.98% (62nd)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-40022US	—OT elevated	0.94% (61st)	Exploit	4.18.2	2026-04-27	2 versions
CVE-2026-43867US	—	0.93% (60th)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-40859US	—	0.89% (59th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-55993US	—	0.86% (58th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46726US	—	0.86% (58th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46590US	—	0.84% (58th)	Exploit	4.18.3	2026-07-06	2 versions
CVE-2026-46454US	—	0.83% (57th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-66907US	—	0.81% (57th)	Exploit	4.14.9	2026-08-24	3 versions
CVE-2026-46456US	—	0.79% (56th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-66906US	—	0.78% (56th)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2024-22369US	—	0.75% (55th)	Exploit	3.21.4	2024-02-20	4 versions
CVE-2026-78329US	—	0.74% (54th)	Exploit	4.14.9	2026-08-24	3 versions
CVE-2026-71300US	—	0.74% (54th)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2026-48204US	—	0.73% (54th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2024-22371US	high7.5	0.69% (53rd)	Exploit	3.21.4	2024-02-26	4 versions
CVE-2026-49042US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-46588US	—	0.69% (53rd)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-46587US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46455US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-49086US	—	0.68% (52nd)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-59230US	—	0.68% (52nd)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2026-49097US	—	0.68% (52nd)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-42527US	—	0.67% (52nd)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-46457US	—	0.66% (51st)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-43866US	—	0.65% (51st)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46585US	—	0.63% (50th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-55994US	—	0.63% (50th)	Exploit	4.18.3	2026-07-06	2 versions
CVE-2026-46592US	—	0.63% (50th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-66908US	—	0.61% (49th)	Exploit	4.22.0	2026-08-24	4.8.0 → 4.22.0
CVE-2026-49098US	—	0.61% (49th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-23552US	—	0.61% (49th)	Exploit	4.18.0	2026-02-23	4.15.0 → 4.18.0
CVE-2026-48205US	—	0.60% (48th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-48203US	—	0.60% (48th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-63621US	—	0.59% (48th)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2026-56139US	—	0.57% (47th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-49365US	—	0.57% (47th)	Exploit	4.21.0	2026-07-06	3 versions

showing 50 of 86

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation26 CVEs
CWE-502Deserialization of Untrusted Data22 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-918Server-Side Request Forgery (SSRF)6 CVEs
CWE-639Authorization Bypass Through User-Controlled Key5 CVEs
CWE-611Improper Restriction of XML External Entity Reference4 CVEs
CWE-178Improper Handling of Case Sensitivity3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE86 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan