What’s Vulnerable › Products

Red Hat build of Apache Camel - HawtIO 4 vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Red Hat build of Apache Camel - HawtIO 4 version is affected

Latest Red Hat build of Apache Camel - HawtIO 4 vulnerabilities

• CVE-2026-10832 — Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload (CVSS 5.9)
• CVE-2026-81320 — Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level (CVSS 5.5)
• CVE-2026-81303 — Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname (CVSS 6.3)
• CVE-2026-78234 — Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users (CVSS 9.9)
• CVE-2026-77968 — Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount (CVSS 8.2)
• CVE-2026-14180 — Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap (CVSS 5.3)
• CVE-2024-5971 — Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket (CVSS 7.5)
• CVE-2024-2700 — Quarkus-core: leak of local configuration properties into quarkus applications (CVSS 7.0)
• CVE-2023-5685 — Xnio: stackoverflowexception when the chain of notifier states becomes problematically big (CVSS 7.5)