THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-25747 (HIGH 8.8) — Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInputFilter or class-load

[NVD] CVE-2026-25747 (HIGH 8.8) — Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInputFilter or class-load

lownvdPublished 2026-02-23

CVE-2026-25747 CVSS: 8.8 HIGH Published: 2026-02-23T09:17:01.043

Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component.

The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. An attacker who can write to the Lev

Indicators of compromise

CVE-2026-25747cve
java.iodomain

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-25747