CVE-2026-78164Published
Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-78164 · Microsoft / collected KEV context
cve-program · CVE-2026-78164
- https://camel.apache.org/security/CVE-2026-78164.html
- https://issues.apache.org/jira/browse/CAMEL-24418
- https://github.com/apache/camel/pull/25571
- https://github.com/apache/camel/commit/ba5aced7f6a1c38a963020575676ad4c76b492cf
- https://github.com/apache/camel/commit/9f8a185e315ce9e120889c4106be3dbf4688e507
- https://github.com/apache/camel/commit/7cec534c66969015d85e56631143174dd150ed94
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.