Improper Handling of Case Sensitivity in Apache Camel by Apache
CVE-2026-80343

8.2HIGH

Key Information:

Vendor: Apache
Status: Apache Camel
Vendor: CVE Published:; 19 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-80343?

An improper handling of case sensitivity vulnerability exists in the Apache Camel Netty HTTP component, affecting versions from 4.0.0 to 4.18.4 and from 4.19.0 to 4.22.0. The problem arises when the camel-netty-http security constraint compares the request path against the configured context path using case-sensitive matching, while the routing mechanism disregards these rules. This creates a discrepancy that allows external attackers to manipulate the case of characters in a request path, bypassing security constraints meant to protect certain routes. To mitigate this issue, users are advised to upgrade to Apache Camel 4.23.0 or later versions, which normalize path comparisons across both constraints and routing.

Affected Version(s)

Apache Camel 4.0.0 < 4.18.5

Apache Camel 4.19.0 < 4.22.1

Apache Camel 4.18.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-80343
Created by oscerd