7.5
High
CVE-2026-6857 A flaw was found in camel-infinispan
Description
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat build of Apache Camel 4 for Quarkus 3 | Versions not published | |
| Red Hat build of Apache Camel for Spring Boot 4 | Versions not published | |
| Red Hat Fuse 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions not published | |
| Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 | Versions not published | |
| Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 | Versions not published |
References
- RHSA-2026:17668 access.redhat.com
- RHSA-2026:22453 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2460003 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat build of Apache Camel 4 for Quarkus 3
The 75 CVEs of Red Hat build of Apache Camel 4 for Quarkus 3 →
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
High
CVE-2026-120971
A flaw was found in RESTEasy's default exception mapper
5.3
Medium
CVE-2026-119542
A flaw was found in the Ickle query parser in Infinispan
4.3
Medium
CVE-2026-94449
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
7.5
High