Apache Camel OAuth cache reuses tokens across scopes (CVE-2026-94386)
camel-oauth from 4.19.0 before 4.22.2 can reuse client-credentials bearer tokens; CVSS 3.1 is 4.8.
48
Product
camel-oauth
- Mentions · 7d0
- Mentions · 30d1
- All mentions1
- First seenOct 23, 2026
- Last mentioned7d ago
Timeline
1 articles · newest firstRelated CVEs
by mentions- Under-keyed OAuth token cache in Apache Camel before 4.22.2
Appears with
- Apachevendor · 1
- Apache Camelproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.