CVE-2026-78162 | Apache Camel up to 4.18.4/4.22.0 camel-hazelcast doStart/getOrCreateHzClientInstance deserialization

October 19, 2026 Yanac

A vulnerability described as critical has been identified in Apache Camel up to 4.18.4/4.22.0. The impacted element is the function doStart/getOrCreateHzClientInstance of the component camel-hazelcast. Executing a manipulation can lead to deserialization.

This vulnerability appears as CVE-2026-78162. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More