Apache Camel

Name: Apache Camel
Brand: Apache

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high0medium0low

updated 2026-10-27

vulnerabilities (115)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-47323US	—	19.6% (97th)	Exploit	4.19.0	2026-05-19	3 versions
CVE-2026-33453US	—	9.18% (95th)	Exploit	4.19.0	2026-04-27	2 versions
CVE-2026-40047US	—	2.43% (84th)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-40453US	—	2.10% (82nd)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2024-51132US	—	1.90% (80th)	Exploit	4.4.4	2024-11-05	< 4.4.4
CVE-2026-40860US	—	1.74% (78th)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2026-33454US	—	1.49% (74th)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2026-40858US	—	1.31% (70th)	Exploit	4.14.7	2026-04-27	6 versions
CVE-2026-25747US	high8.8	1.26% (69th)	Exploit	4.14.5	2026-02-23	3 versions
CVE-2026-27172US	—	1.23% (69th)	Exploit	4.18.1	2026-04-27	3 versions
CVE-2026-40473US	—	1.19% (68th)	Exploit	4.18.2	2026-04-27	5 versions
CVE-2026-53913US	—OT elevated	1.08% (65th)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-43865US	—	0.98% (62nd)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-40022US	—OT elevated	0.94% (61st)	Exploit	4.14.6	2026-04-27	4 versions
CVE-2026-43867US	—	0.93% (60th)	Exploit	4.20.0	2026-07-06	5 versions
CVE-2026-78162US	—	0.92% (60th)	Exploit	4.23.0	2026-10-19	3 versions
CVE-2026-40859US	—	0.89% (59th)	Exploit	4.21.0	2026-07-06	5 versions
CVE-2026-55993US	—	0.86% (58th)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-46726US	—	0.86% (58th)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-83531US	—	0.85% (58th)	Exploit	4.23.0	2026-10-19	3 versions
CVE-2026-46590US	—	0.84% (58th)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-46454US	—	0.83% (57th)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-66907US	—	0.81% (57th)	Exploit	4.22.0	2026-08-24	3 versions
CVE-2026-46456US	—	0.79% (56th)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-66906US	—	0.78% (56th)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2024-22369US	—	0.75% (55th)	Exploit	4.4.0	2024-02-20	4 versions
CVE-2026-78329US	—	0.74% (54th)	Exploit	4.14.9	2026-08-24	3 versions
CVE-2026-71300US	—	0.74% (54th)	Exploit	4.22.0	2026-08-24	3 versions
CVE-2026-48204US	—	0.73% (54th)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-78165US	—	0.73% (54th)	Exploit	4.22.1	2026-10-19	3 versions
CVE-2026-49042US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	5 versions
CVE-2026-46588US	—	0.69% (53rd)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-46587US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	5 versions
CVE-2026-46455US	—	0.69% (53rd)	Exploit	4.21.0	2026-07-06	5 versions
CVE-2026-49086US	—	0.68% (52nd)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-59230US	—	0.68% (52nd)	Exploit	4.14.9	2026-08-24	3 versions
CVE-2026-49097US	—	0.68% (52nd)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-42527US	—	0.67% (52nd)	Exploit	4.14.8	2026-07-06	5 versions
CVE-2026-79985US	—	0.66% (51st)	Exploit	4.23.0	2026-10-19	3 versions
CVE-2026-79984US	—	0.66% (51st)	Exploit	4.23.0	2026-10-19	3 versions
CVE-2026-79983US	—	0.66% (51st)	Exploit	4.18.5	2026-10-19	3 versions
CVE-2026-46457US	—	0.66% (51st)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-43866US	—	0.65% (51st)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-79986US	—	0.65% (51st)	Exploit	4.22.1	2026-10-19	3 versions
CVE-2026-46585US	—	0.63% (50th)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-55994US	—	0.63% (50th)	Exploit	4.20.0	2026-07-06	5 versions
CVE-2026-46592US	—	0.63% (50th)	Exploit	4.19.0	2026-07-06	5 versions
CVE-2026-66908US	—	0.61% (49th)	Exploit	4.18.4	2026-08-24	3 versions
CVE-2026-49098US	—	0.61% (49th)	Exploit	4.18.3	2026-07-06	5 versions
CVE-2026-23552US	—	0.61% (49th)	Exploit	4.18.0	2026-02-23	3 versions

showing 50 of 115

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation29 CVEs
CWE-502Deserialization of Untrusted Data19 CVEs
CWE-611Improper Restriction of XML External Entity Reference8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-918Server-Side Request Forgery (SSRF)7 CVEs
CWE-209Generation of Error Message Containing Sensitive Information6 CVEs
CWE-287Improper Authentication6 CVEs
CWE-639Authorization Bypass Through User-Controlled Key6 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)112 CVEs
NLNCSC-NL (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan