Critical 1 vendor · 2 advisories

CVE-2025-27636

Unified cross-vendor view: this CVE is referenced by 1 tracked vendor. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache2 advisories

Critical9.4Apache Camel: The Camel-Mail component is vulnerable to Camel message header injection.Apr 27, 2026
Critical9.9Apache Camel: The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names suc…Apr 27, 2026