CVE-2026-88900 | Apache Camel up to 4.18.4/4.22.0 Camel-Jgroups org.jgroups.Message.getObject deserialization

October 19, 2026 Yanac

A vulnerability categorized as critical has been discovered in Apache Camel up to 4.18.4/4.22.0. The affected element is the function org.jgroups.Message.getObject of the component Camel-Jgroups. Such manipulation leads to deserialization.

This vulnerability is listed as CVE-2026-88900. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More