CVE-2026-78162

Deserialization of Untrusted Data vulnerability in Apache Camel.

Camel

Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it creates from its own configuration, a protection introduced by CVE-2026-43865. That change did not reach two of the configuration paths Camel builds itself, so those paths continued to create Hazelcast instances whose…

19. Okt 2026

Ausgewertete Quellen

• Hersteller
  https://camel.apache.org/security/CVE-2026-43865.html
• Hersteller
  https://camel.apache.org/security/CVE-2026-78162.html
• Hersteller
  https://issues.apache.org/jira/browse/CAMEL-24413
• NVD
  CVE-2026-78162