Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Apache Camel | CVE-2026-85254 Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The guard that prevents a request header being reflected into the response compared header names case sensitively,… |
6,5 | 0,68 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85257 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare,… |
5,3 | 0,63 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85260 Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-mllp component carries a logPhi option that governs whether HL7 payload content may be written to the… |
5,5 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-84180 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the… |
5,3 | 0,65 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-84181 Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same… |
5,9 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85243 Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. unmarshal() verified the modification detection code only when the message was an OpenPGP symmetrically encrypted… |
5,9 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85245 Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Thrift data format unmarshalled incoming data into the shared defaultInstance of the target type rather than into… |
5,9 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85246 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed, the Mina consumer wrote exchange.getException() straight back… |
5,3 | 0,63 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85247 Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When SSL was enabled on the Knative HTTP client but no truststore was configured, the client options fell back to trusting every… |
5,9 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-85248 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. The producer held a single java.security.Signature instance and used… |
5,9 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-80312 Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-oauth processors that guard a route did not stop the exchange when authentication could not be completed. Where a failure to… |
8,2 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-80343 Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-netty-http security constraint compared the request path against the configured context path using a… |
8,2 | 0,93 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-80344 Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an… |
8,2 | 0,88 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-83531 Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before… |
8,8 | 0,85 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-84176 Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler() set Access-Control-Allow-Credentials: true outside the origin check, so… |
6,5 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-84178 Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The authorization code callback did not carry a state parameter binding it to the authorization request that started the flow,… |
6,1 | 0,18 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-79983 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the… |
9,1 | 1,02 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-79984 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and… |
7,4 | 0,66 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-79985 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache Camel: from 4.2.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the… |
7,4 | 0,66 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-79986 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and… |
9,1 | 1,02 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-78162 Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it creates from its own… |
9,8 | 1,08 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-78163 Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from… |
5,9 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-78164 Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… |
8,2 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Camel | CVE-2026-78165 Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option… |
8,8 | 0,73 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Johnzon | CVE-2026-71253 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads & static-initializes an attacker-named class from untrusted JSON. This issue affects Apache Johnzon: from 1.0.0 before 2.2.0. Users are recommended to… |
9,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 13.11.2026, 23:02 UTC – 14.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.