CVE record · 1 source
CVE-2026-78165
CVSS 8.8Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.
- Vendor
- Microsoft, Oracle
- Product
- exchange, java
- CVSS
- 8.8
- Exposure class
- Database, Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. RedisConfiguration.getSerializer lazily built a bare…