CVE-2026-33453 - Vulnerability Analysis

Overview

Apache Camel camel-coap component 4.14.0-4.14.5, 4.18.0 before 4.18.1, and 4.19.0 contains a remote code execution caused by improper header filtering of CoAP URI query parameters, letting unauthenticated attackers inject headers and execute arbitrary OS commands via header-sensitive producers, exploit requires sending a single CoAP UDP packet.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary OS commands remotely, leading to full system compromise under Camel process privileges.

Mitigation

Upgrade to Apache Camel version 4.18.1 or 4.19.0 or later.

References

• https://camel.apache.org/security/CVE-2026-33453.html
• http://www.openwall.com/lists/oss-security/2026/04/26/3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner