{"document":{"aggregate_severity":{"text":"hoch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Apache Camel ist ein Integrations-Framework, das Enterprise Integration Patterns implementiert.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.","title":"Angriff"},{"category":"general","text":"- Linux\n- UNIX\n- Windows","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-4006 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4006.json"},{"category":"self","summary":"WID-SEC-2026-4006 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4006"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-78162.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-78163.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-78164.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-78165.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-79983.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-79984.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-79985.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-79986.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-80312.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-80343.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-80344.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-83531.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-84176.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-84178.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-84180.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-84181.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85243.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85245.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85246.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85247.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85248.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85249.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85250.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85251.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85254.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85257.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85260.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85296.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85300.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85301.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85312.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85313.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85314.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85315.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85316.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-85317.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-88901.html"},{"category":"external","summary":"Apache Camel security advisory vom 2026-10-15","url":"https://camel.apache.org/security/CVE-2026-91858.html"}],"source_lang":"en-US","title":"Apache Camel: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-10-15T22:00:00.000+00:00","generator":{"date":"2026-10-16T11:25:56.073+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-4006","initial_release_date":"2026-10-15T22:00:00.000+00:00","revision_history":[{"date":"2026-10-15T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version_range","name":"<4.23.0","product":{"name":"Apache Camel <4.23.0","product_id":"T061340"}},{"category":"product_version","name":"4.23.0","product":{"name":"Apache Camel 4.23.0","product_id":"T061340-fixed","product_identification_helper":{"cpe":"cpe:/a:apache:camel:4.23.0"}}},{"category":"product_version_range","name":"<4.22.1","product":{"name":"Apache Camel <4.22.1","product_id":"T061342"}},{"category":"product_version","name":"4.22.1","product":{"name":"Apache Camel 4.22.1","product_id":"T061342-fixed","product_identification_helper":{"cpe":"cpe:/a:apache:camel:4.22.1"}}},{"category":"product_version_range","name":"<4.18.5","product":{"name":"Apache Camel <4.18.5","product_id":"T061343"}},{"category":"product_version","name":"4.18.5","product":{"name":"Apache Camel 4.18.5","product_id":"T061343-fixed","product_identification_helper":{"cpe":"cpe:/a:apache:camel:4.18.5"}}}],"category":"product_name","name":"Camel"}],"category":"vendor","name":"Apache"}]},"vulnerabilities":[{"cve":"CVE-2026-78162","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-78162"},{"cve":"CVE-2026-78163","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-78163"},{"cve":"CVE-2026-78164","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-78164"},{"cve":"CVE-2026-78165","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-78165"},{"cve":"CVE-2026-79983","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-79983"},{"cve":"CVE-2026-79984","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-79984"},{"cve":"CVE-2026-79985","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-79985"},{"cve":"CVE-2026-79986","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-79986"},{"cve":"CVE-2026-80312","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-80312"},{"cve":"CVE-2026-80343","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-80343"},{"cve":"CVE-2026-80344","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-80344"},{"cve":"CVE-2026-83531","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-83531"},{"cve":"CVE-2026-84176","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-84176"},{"cve":"CVE-2026-84178","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-84178"},{"cve":"CVE-2026-84180","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-84180"},{"cve":"CVE-2026-84181","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-84181"},{"cve":"CVE-2026-85243","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85243"},{"cve":"CVE-2026-85245","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85245"},{"cve":"CVE-2026-85246","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85246"},{"cve":"CVE-2026-85247","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85247"},{"cve":"CVE-2026-85248","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85248"},{"cve":"CVE-2026-85249","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85249"},{"cve":"CVE-2026-85250","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85250"},{"cve":"CVE-2026-85251","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85251"},{"cve":"CVE-2026-85254","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85254"},{"cve":"CVE-2026-85257","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85257"},{"cve":"CVE-2026-85260","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85260"},{"cve":"CVE-2026-85296","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85296"},{"cve":"CVE-2026-85300","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85300"},{"cve":"CVE-2026-85301","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85301"},{"cve":"CVE-2026-85312","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85312"},{"cve":"CVE-2026-85313","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85313"},{"cve":"CVE-2026-85314","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85314"},{"cve":"CVE-2026-85315","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85315"},{"cve":"CVE-2026-85316","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85316"},{"cve":"CVE-2026-85317","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-85317"},{"cve":"CVE-2026-88901","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-88901"},{"cve":"CVE-2026-91858","product_status":{"known_affected":["T061340","T061342","T061343"]},"release_date":"2026-10-15T22:00:00.000+00:00","title":"CVE-2026-91858"}]}