THREAT OPS › Threat News › CVE-2026-78329: Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
CVE-2026-78329: Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
<p>Posted by Andrea Cosentino on Aug 24</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Camel (org.apache.camel:camel-undertow) 4.11.0 before 4.14.9<br /> - Apache Camel (org.apache.camel:camel-undertow) 4.15.0 before 4.18.4<br /> - Apache Camel (org.apache.camel:camel-undertow) 4.19.0 before 4.22.0<br /> <br /> Description:<br /> <br /> Improper input validation vulne
Indicators of compromise
- CVE-2026-78329cve
Original source: https://seclists.org/oss-sec/2026/q3/568