CVE-2026-40453Critical· 9.9▾ Midnight

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'. The same setLowerCase(true) c…

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score55/ 100 · Moderate

impact 54.5 · likelihood 0.2 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-40453 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.