← All CVEs NewScan detects
high

CVE-2026-80344

Apache Camel 4.0.0-4.18.4: server-side request forgery in the AS2 component's message processing

Severity
high
Affected product
Apache Camel
Affected versions
Apache Camel ≥ 4.0.0, < 4.18.5
Affected versions
Apache Camel ≥ 4.19.0, < 4.22.1
Fixed in
Apache Camel 4.18.5
Fixed in
Apache Camel 4.22.1
Detection basis
Component version range
Shipped rule
Apache Camel: Apache Camel 4.0.0-4.18.4: server-side request forgery in the AS2 component's message processing
Apache Camel: Apache Camel 4.19.0-4.22.0: server-side request forgery in the AS2 component's message processing
Added to NewScan
2026-10-19
Detected by
NewScan — free, self-hosted

How NewScan reports it

COMPONENT VERSION RANGE

NewScan fingerprints Apache Camel from its response and reports this CVE when the detected version falls inside the affected range below.

COMPONENT VERSION RANGE

NewScan fingerprints Apache Camel from its response and reports this CVE when the detected version falls inside the affected range below.

References

Scan for this yourself — local, in-band scanning is free.

Get NewScan (FREE) →

Review the measured benchmark, then use the verified remediation process.