CVE-2026-49042

HighCVSS 7.3

Published: 06/07/2026(UTC)Updated: 08/07/2026(UTC)Translated: 09/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Improper Input Validation vulnerability in Apache Camel. The flaw allows potential attacks via malicious input data.

Risk Assessment

Risk for the organization includes potential remote execution of unauthorized operations or data integrity compromise by an attacker.

Recommendation

It is recommended to immediately upgrade Apache Camel to version 4.18.3 or 4.21.0, which contain the fix.

Original NVD description (English source)

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue.