High severity7.5NVD Advisory· Published Apr 22, 2026· Updated Jun 2, 2026
CVE-2026-6857
CVE-2026-6857
Description
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and availability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.camel:camel-infinispanMaven | < 4.20.0 | 4.20.0 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-xfxp-ppx7-cqrpghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-6857ghsaADVISORY
- access.redhat.com/errata/RHSA-2026:17668nvdWEB
- access.redhat.com/errata/RHSA-2026:22453nvdWEB
- access.redhat.com/security/cve/CVE-2026-6857nvdWEB
- bugzilla.redhat.com/show_bug.cginvdWEB
- github.com/apache/camel/commit/ec297f89065b6cfc2682487a96411692d6c296e2ghsaWEB
News mentions
0No linked articles in our index yet.