CVE-2016-8749

CVE-2016-8749: vulnerability in Apache Camel

Published · Updated

Follow this CVE+ Monitor Apache Camel+ Monitor org.apache.camel:camel-jackson

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 11%
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
Affected products
Apache Software Foundation · Apache Camel
Related CVEs — Apache Camel

In the same product, most dangerous first.

CVE-2025-27636MEDIUMApache Camel: Camel Message Header Injection via Improper FilteringEPSS 97.1%CVE-2025-29891MEDIUMApache Camel: Camel Message Header Injection through request parametersEPSS 76.1%CVE-2026-47323CRITICALApache Camel: Camel-CXF Message Header Injection via Missing Inbound FilteringEPSS 19.6%CVE-2018-8041—CVE-2018-8041EPSS 9.6%CVE-2026-33453CRITICALApache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code ExecutionEPSS 9.2%CVE-2017-12634—CVE-2017-12634EPSS 7.2%