tag
Spring-Boot
Critical
camel-coap Header Injection → RCE Self-Contained Reproducer (CVE-2026-33453)
CVE-2026-33453·
Apache Camel camel-coap component (org.apache.camel.coap.CamelCoapResource), routes forwarding to camel-exec
unpatched
Critical
Apache Camel `camel-consul` ConsulRegistry Deserialization RCE (CVE-2026-27172)
CVE-2026-27172·
Apache Camel camel-consul component (org.apache.camel.component.consul.ConsulRegistry)
unpatched
Critical
Thymeleaf SpEL Injection Remote Code Execution (CVE-2026-41901)
CVE-2026-41901·
Spring Boot application using Thymeleaf template engine
unpatched
Critical
Spring Security Lazy Header Writing Security Header Bypass (CVE-2026-22732)
CVE-2026-22732·
Spring Security (Spring Boot applications)
unpatched