CVE-2026-46588
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
An improper input validation vulnerability has been discovered in Apache Camel. This flaw allows an attacker to inject malicious data, potentially leading to unexpected application behavior.
Risk Assessment
The risk for the organization includes potential data integrity breaches and injection attacks, which could result in information disclosure or service disruption.
Recommendation
It is recommended to immediately upgrade Apache Camel to version 4.14.8, 4.18.3, or 4.21.0, which contain the fix for this vulnerability.
Original NVD description (English source)
Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.14.8, 4.18.3, 4.21.0, which fixes the issue.