CVE-2026-33453 - Vulnerability Analysis

Overview

Apache Camel camel-coap component 4.14.0-4.14.5, 4.18.0 before 4.18.1, and 4.19.0 contains a remote code execution caused by improper header filtering of CoAP URI query parameters, letting unauthenticated attackers inject headers and execute arbitrary OS commands via header-sensitive producers, exploit requires sending a single CoAP UDP packet.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary OS commands remotely, leading to full system compromise under Camel process privileges.

Mitigation

Upgrade to Apache Camel version 4.18.1 or 4.19.0 or later.

References

• https://camel.apache.org/security/CVE-2026-33453.html
• http://www.openwall.com/lists/oss-security/2026/04/26/3

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 27, 2026

🔴 CVE-2026-33453 - Critical (10) Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component. Apache Camel's camel-coap component is vulnerable to Camel message header injection, leading to remote code executi... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33453/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

GitHub Repositories(1 repo)

• https://github.com/dinosn/apache-camel

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner