Camel K

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 26, 2026
Last mentioned4d ago

Timeline

1 articles · newest first

Apache Camel flaws allow remote code execution and data theft

Eight critical and high issues span Camel K and Camel components, with fixes that differ by branch.

GBHackersOct 26, 11:30 UTC · 4d agoVulnerabilityCVE-2026-80352 CVE-2026-80351 CVE-2026-88900+51

Related CVEs

by mentions

CVE-2026-803529.8
YAML injection in Apache Camel K lets CR authors create objects with operator privileges
published Sep 10, 2026Apache Camel K
CVE-2026-803519.8
Eval injection in Apache Camel K lets tenants run code with operator privileges
published Sep 10, 2026Apache Camel K
CVE-2026-88900<1%8.8
Unsafe Java deserialization RCE in Apache Camel JGroups
published 11d agoApache Camel (Camel-JGroups)PoC
CVE-2026-781658.8
Untrusted Java deserialization in Apache Camel Spring Redis
published 11d agoApache Camel
CVE-2026-80312<1%8.2
Fail-open OAuth guard in Apache Camel routes
published 11d agoApache CamelPoC
CVE-2026-78164<1%8.2
Template injection and info leak in Apache Camel HTTP producers
published 11d agoApache Camel (HTTP, Netty HTTP, Undertow, Vert.x HTTP)PoC
CVE-2026-889018.2
XXE in Apache Camel Smooks default XML reader
published 11d agoApache Camel
CVE-2026-852517.5
Credential leak on redirect in Apache Camel HTTP
published 11d agoApache Camel HTTP component

Appears with

Apachevendor · 1
Apache Camelproduct · 1

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.