| CVE-2026-71569 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component
|
4.8
Medium
|
Oct 29, 2026 |
| CVE-2026-90885 |
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component
|
7.5
High
|
Oct 26, 2026 |
| CVE-2026-94386 |
Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component
|
4.8
Medium
|
Oct 26, 2026 |
| CVE-2026-95628 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling…
|
5.4
Medium
|
Oct 26, 2026 |
| CVE-2026-95629 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling…
|
5.4
Medium
|
Oct 26, 2026 |
| CVE-2026-95663 |
Insufficient Session Expiration vulnerability in Apache Camel Keycloak component
|
4.8
Medium
|
Oct 26, 2026 |
| CVE-2026-95664 |
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')…
|
5.4
Medium
|
Oct 26, 2026 |
| CVE-2026-101259 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component
|
5.3
Medium
|
Oct 26, 2026 |
| CVE-2026-88900 |
Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component
|
8.8
High
|
Oct 19, 2026 |
| CVE-2026-91858 |
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through…
|
6.5
Medium
|
Oct 19, 2026 |
| CVE-2026-88901 |
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel
|
8.2
High
|
Oct 19, 2026 |
| CVE-2026-85317 |
Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component
|
4.8
Medium
|
Oct 19, 2026 |
| CVE-2026-85316 |
Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component
|
4.8
Medium
|
Oct 19, 2026 |
| CVE-2026-85315 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-85314 |
Improper Input Validation vulnerability in Apache Camel Mail component
|
6.5
Medium
|
Oct 19, 2026 |
| CVE-2026-85313 |
Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component
|
4.3
Medium
|
Oct 19, 2026 |
| CVE-2026-85312 |
Improper Input Validation vulnerability in Apache Camel Core component
|
4.8
Medium
|
Oct 19, 2026 |
| CVE-2026-85300 |
Incorrect Default Permissions vulnerability in Apache Camel PQC component
|
5.5
Medium
|
Oct 19, 2026 |
| CVE-2026-85301 |
Improper Authentication vulnerability in Apache Camel Keycloak component
|
4.8
Medium
|
Oct 19, 2026 |
| CVE-2026-85296 |
Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component
|
6.5
Medium
|
Oct 19, 2026 |
| CVE-2026-85260 |
Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component
|
5.5
Medium
|
Oct 19, 2026 |
| CVE-2026-85257 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-85254 |
Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component
|
6.5
Medium
|
Oct 19, 2026 |
| CVE-2026-85251 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component
|
7.5
High
|
Oct 19, 2026 |
| CVE-2026-85250 |
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component
|
7.5
High
|
Oct 19, 2026 |