CVE-2026-46587

published 2026-07-06

CVE-2026-46587: Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through…

Priority P3 45 high 7.3 CVSS 3.1

AV N AC L PR N UI N S U C L I L A L

Improper Input Validation vulnerability in Apache Camel.

This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0.

Users are recommended to upgrade to version 4.14.8, 4.18.3, 4.21.0, which fixes the issue.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apache	camel	>= 4.0.0 < 4.14.8	4.14.8
apache	camel	>= 4.15.0 < 4.18.3	4.18.3
apache	camel	>= 4.19.0 < 4.21.0	4.21.0
apache_software_foundation	apache_camel	<= 4.14.7	—
apache_software_foundation	apache_camel	4.15.0 – 4.18.2	—
apache_software_foundation	apache_camel	4.19.0 – 4.20.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20