Apache Software Foundation Apache Camel Platform HTTP Main vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache Camel Platform HTTP Main, newest first. Follow to get an email when a new one appears.

1 results

8.2High

CVE-2026-40022 6 months ago

Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtime

Apache Software Foundation Apache Camel Platform HTTP Main; Red Hat Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14; Red Hat OpenShift Serverless; Red Hat Red Hat build of Apache Camel 4 for Quarkus 3

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenti…