Skip to content
Apache Camel FTP Vulnerability CVE-2026-79983 Exploited

Apache Camel FTP Vulnerability CVE-2026-79983 Exploited

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •CVE-2026-79983 allows unauthorized file access via manipulated FTP listings.
  • •Affected versions include Apache Camel 4.0.0 to 4.22.0, with fixes in 4.18.5 and later.
  • •Proof-of-concept code for the vulnerability is publicly available.

A vulnerability in Apache Camel's FTP component, identified as CVE-2026-79983, allows attackers to exploit the lack of path containment in remote file retrieval. This flaw affects versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.0, enabling unauthorized access to files outside the designated directory. Attackers can manipulate the FTP server's directory listing to include crafted entries that lead to file retrieval beyond the intended scope. The issue was reported on October 16, 2026, with a proof-of-concept exploit made available. The vulnerability has been addressed in versions 4.18.5, 4.22.1, and 4.23.0. Organizations using affected versions are urged to upgrade immediately to mitigate risks. The flaw has a CVSS score of 7.5, categorizing it as high severity. No reports of have been confirmed as of now.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-16
CVE-2026-79983 disclosed
Apache Camel vulnerability CVE-2026-79983 was reported, detailing its exploitation potential through FTP.
Sploitus
2026-10-16
Proof-of-concept released
A proof-of-concept exploit demonstrating the vulnerability was made publicly available.
Sploitus
2026-10-16
Fix released
Apache released updates for affected versions, addressing the vulnerability in 4.18.5 and later.
Sploitus
2026-10-16
Public exploit for CVE-2026-79985 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub

More articles in this cluster (4)

Following this threat?

Track CVE-2026-79983 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 3

Common questions

Which versions of Apache Camel are affected?
Versions 4.0.0 to 4.22.0 are affected, with fixes in 4.18.5, 4.22.1, and 4.23.0.
Is there a known exploit in the wild?
No confirmed active exploitation has been reported as of now.
What should organizations do?
Organizations should upgrade to the fixed versions immediately to mitigate the risk.