Apache Apache Camel <4.23.0

Name: Apache Apache Camel <4.23.0
Brand: Apache

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-27

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-78162US	—	0.92% (60th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-83531US	—	0.85% (58th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-78165US	—	0.73% (54th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-79985US	—	0.66% (51st)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-79984US	—	0.66% (51st)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-79983US	—	0.66% (51st)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-79986US	—	0.65% (51st)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-80312US	—	0.57% (47th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85250US	—	0.56% (46th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-80343US	—	0.52% (44th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85251US	—	0.50% (43rd)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-80344US	—	0.49% (42nd)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-78163US	—	0.46% (40th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-88901US	—	0.45% (39th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85248US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85247US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-84181US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-84176US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85257US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85246US	—	0.42% (36th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-84180US	—	0.40% (34th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85296US	—	0.39% (33rd)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85245US	—	0.37% (31st)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-78164US	—	0.34% (28th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85254US	—	0.34% (28th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85249US	—	0.34% (28th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85315US	—	0.32% (25th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-91858US	—	0.31% (23rd)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85301US	—	0.30% (23rd)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85314US	—	0.28% (20th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85313US	—	0.27% (19th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85317US	—	0.27% (19th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85312US	—	0.27% (19th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85316US	—	0.25% (16th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85243US	—	0.18% (8th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-84178US	—	0.18% (8th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85260US	—	0.18% (7th)	Exploit	4.23.0	2026-10-19	< 4.23.0
CVE-2026-85300US	—OT elevated	0.17% (6th)	Exploit	4.23.0	2026-10-19	< 4.23.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-209Generation of Error Message Containing Sensitive Information4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-178Improper Handling of Case Sensitivity2 CVEs
CWE-488Exposure of Data Element to Wrong Session2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan