Get real-time updates on Telegram
P3Verified
Apache Camel has an incomplete fix for CVE-2025-27636
CVE-2026-40453 affects org.apache.camel:camel-coap. CVSS base score 9.9 (GitHub Advisory Database). EPSS 0.01889 (percentile 0.78833), scored 2026-10-04. Affected range: >= 3.0.0, < 4.14.6. Fixed version: 4.14.6. Affected range: >= 4.15.0, < 4.18.2. Fixed version: 4.18.2. Affected range: >= 4.19.0, < 4.20.0. Fixed version: 4.20.0. Affected range: >= 3.0.0, < 4.14.6. Fixed version: 4.14.6. Affected range: >= 4.15.0, < 4.18.2. Fixed version: 4.18.2. Affected range: >= 4.19.0, < 4.20.0. Fixed version: 4.20.0. Affected range: >= 3.0.0, < 4.14.6. Fixed version: 4.14.6. Affected range: >= 4.15.0, < 4.18.2.
- CVE
- CVE-2026-40453
- Product
- org.apache.camel:camel-coap
- CCR priority
- 40.1 /100 (P3)
- CVSS
- 9.9 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · GitHub Advisory Database
- EPSS
- 0.01889 · percentile 0.78833 · 2026-10-04
- KEV
- no
Affected products
- org.apache.camel:camel-coap · >= 3.0.0, < 4.14.6 · Fixed version: 4.14.6
- org.apache.camel:camel-coap · >= 4.15.0, < 4.18.2 · Fixed version: 4.18.2
- org.apache.camel:camel-coap · >= 4.19.0, < 4.20.0 · Fixed version: 4.20.0
- org.apache.camel:camel-google-pubsub · >= 3.0.0, < 4.14.6 · Fixed version: 4.14.6
- org.apache.camel:camel-google-pubsub · >= 4.15.0, < 4.18.2 · Fixed version: 4.18.2
- org.apache.camel:camel-google-pubsub · >= 4.19.0, < 4.20.0 · Fixed version: 4.20.0
- org.apache.camel:camel-jms · >= 3.0.0, < 4.14.6 · Fixed version: 4.14.6
- org.apache.camel:camel-jms · >= 4.15.0, < 4.18.2 · Fixed version: 4.18.2
- org.apache.camel:camel-jms · >= 4.19.0, < 4.20.0 · Fixed version: 4.20.0
- org.apache.camel:camel-sjms · >= 3.0.0, < 4.14.6 · Fixed version: 4.14.6
- org.apache.camel:camel-sjms · >= 4.15.0, < 4.18.2 · Fixed version: 4.18.2
- org.apache.camel:camel-sjms · >= 4.19.0, < 4.20.0 · Fixed version: 4.20.0
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-40453.html