Cyber ·
CVE-2026-101259: Apache Camel CoAP exposes information through unsilenced consumer errors
Advisory dated October 23, 2026 on the Apache Camel camel-coap component: unsilenced consumer exceptions can produce error messages containing sensitive information. Medium severity, CVSS 3.1 5.3. Fixed versions: 4.18.5 and 4.22.2.
According to the advisory, consumer exceptions in the Apache Camel CoAP component can produce error messages containing sensitive information. The flaw is identified as CVE-2026-101259 and was published on the oss-sec feed on October 23, 2026. The item is an automatic translation of content originally in English, so the original source should be consulted for the full text.
Severity: CVSS 3.1 score of 5.3, rated medium, with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. Affected versions: Apache Camel (org.apache.camel:camel-coap) from 4.0.0 before 4.18.5, and from 4.19.0 before 4.22.2.
The excerpt available in the source is truncated and does not detail all exploitation conditions or every type of information exposed. For that, consult the original advisory on the oss-sec feed referenced in the material. This summary cannot confirm which deployments are exposed.