CVE-2026-43867 | Apache Camel up to 4.18.2/4.20.x Camel-PQC java.io.ObjectInputStream deserialization

A vulnerability was found in Apache Camel up to 4.18.2/4.20.x and classified as critical. Impacted is the function java.io.ObjectInputStream of the component Camel-PQC. Executing a manipulation can lead to deserialization.

The identification of this vulnerability is CVE-2026-43867. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More