7.5
Élevée
CVE-2026-6857 A flaw was found in camel-infinispan
Description
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat build of Apache Camel 4 for Quarkus 3 | Versions non publiées | |
| Red Hat build of Apache Camel for Spring Boot 4 | Versions non publiées | |
| Red Hat Fuse 7 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions non publiées | |
| Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 | Versions non publiées | |
| Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 | Versions non publiées |
Références
- RHSA-2026:17668 access.redhat.com
- RHSA-2026:22453 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2460003 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat build of Apache Camel 4 for Quarkus 3
Les 75 CVE de Red Hat build of Apache Camel 4 for Quarkus 3 →
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
Élevée
CVE-2026-120971
A flaw was found in RESTEasy's default exception mapper
5.3
Moyenne
CVE-2026-119542
A flaw was found in the Ickle query parser in Infinispan
4.3
Moyenne
CVE-2026-94449
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
7.5
Élevée