Redhat Build Of Apache Camel vulnerabilities

• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +3 more +5 more Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl CVE-2026-50633 Fix available 8.1 HighJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 more Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory CVE-2026-50632 Fix available 8.1 HighJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control CVE-2026-50628 Fix available 9.8 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator CVE-2026-50627 Fix available 9.1 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 more Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils CVE-2026-49875 Fix available 9.8 CriticalJune 12, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 more Undertow: undertow: request smuggling via malformed http request headers CVE-2026-28369 Fix available 8.7 HighMarch 27, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +20 more +22 more Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator CVE-2026-28367 Fix available 8.7 HighMarch 27, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 more Undertow: undertow: request smuggling via inconsistent header parsing CVE-2026-28368 Fix available 8.7 HighMarch 27, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 more Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf CVE-2025-12543 Fix available 9.6 CriticalJanuary 7, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 more Undertow: undertow madeyoureset http/2 ddos vulnerability CVE-2025-9784 Public exploitFix available 7.5 HighSeptember 2, 2025
• red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 more Undertow: improper state management in proxy protocol parsing causes information leakage CVE-2024-7885 Fix available 7.5 HighAugust 21, 2024