Skip to content

CVE record · 1 source

CVE-2026-90885

CVSS 7.5

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component.

Vendor: Apache Software Foundation
Product: Apache Camel
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-611
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 5d ago

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component.

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. XQueryBuilder in camel-saxon, which…

CVSS 7.5 No fix yet CVE-2026-90885 Apache Software Foundation