CVE WATCH / VULNERABILITY DETAIL

CVE-2026-84176

MEDIUMCVSS 6.5NVD feed

Published 19 October 2026 · tracked since 19 October 2026

Description

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler() set Access-Control-Allow-Credentials: true outside the origin check, so th

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools