Red Hat build of Apache Camel - HawtIO 4 vulnerabilities

Product

Red Hat build of Apache Camel - HawtIO 4

by Red Hat · last CVE Sep 18, 2026

CVEs

On KEV

10.0

Max CVSS

New 30D

Severity mix

Critical 5High 32Medium 6Low 1

Severity

Exploitation

Watch

Add Red Hat build of Apache Camel - HawtIO 4 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-81303	6.3	0%	Sep 15	Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname Affected: All versions, or not specified
CVE-2026-42338	6.1	0%	May 12	ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified
CVE-2026-10832	5.9	1%	Sep 18	Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload Affected: All versions, or not specified
CVE-2026-81320	5.5	0%	Sep 15	Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level Affected: All versions, or not specified
CVE-2026-14180	5.3	1%	Aug 11	Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified