https://vulnerability.circl.lu/sightings/feed 2026-07-06T20:43:58.662663+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/157f35db-d66e-4c12-ae22-1bda824367e1/export 2026-07-06T20:43:58.686585+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "157f35db-d66e-4c12-ae22-1bda824367e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43865", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpy75nbykh24", "content": "Apache Camel flaw (CRITICAL): Hazelcast deserialization bug enables RCE if attacker joins cluster. Affects 4.0.0 \u2013 4.14.7, 4.15.0 \u2013 4.18.2, 4.19.0 \u2013 4.20.x. Upgrade or harden Hazelcast config now. https://radar.offseq.com/threat/cve-2026-43865-cwe-502-deserialization-of-untruste-d2e34a1a7ce10b73 ...", "creation_timestamp": "2026-07-06T13:30:31.622123Z"} 2026-07-06T13:30:31.622123+00:00 https://vulnerability.circl.lu/sighting/f86cb3a2-fe4c-4ca2-86e3-8335495976f7/export 2026-07-06T20:43:58.688570+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f86cb3a2-fe4c-4ca2-86e3-8335495976f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43865", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116873273590366771", "content": "CVE-2026-43865 (CRITICAL): Apache Camel Hazelcast component deserializes untrusted data by default, enabling RCE if attacker accesses the cluster. Patch: 4.21.0, 4.18.3, or 4.14.8. Harden configs if upgrade isn't possible. https://radar.offseq.com/threat/cve-2026-43865-cwe-502-deserialization-of-untruste-d2e34a1a7ce10b73 #OffSeq #CVE #ApacheCamel", "creation_timestamp": "2026-07-06T13:30:29.571828Z"} 2026-07-06T13:30:29.571828+00:00 https://vulnerability.circl.lu/sighting/64bbcbf8-ec97-4c85-aee3-0cd8624c9ddb/export 2026-07-06T20:43:58.688739+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "64bbcbf8-ec97-4c85-aee3-0cd8624c9ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43865", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwdlgokiu2l", "content": "CVE-2026-43865: Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution", "creation_timestamp": "2026-07-05T19:44:29.566474Z"} 2026-07-05T19:44:29.566474+00:00