{"vulnerability": "CVE-2026-48205", "sightings": [{"uuid": "1583d36a-e8b7-44a4-bca8-cdaf0dbe38eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425", "content": "CVE-2026-48205: Apache Camel: Camel-DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect DNS queries to an attacker-controlled server (server-side request forgery) and enumerate internal", "creation_timestamp": "2026-07-05T20:21:56.336436Z"}, {"uuid": "16744b96-9375-4806-a635-05bc100c024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b", "content": "CVE-2026-48205 - apache camel dns\nApache Camel's DNS component allows an attacker to control which DNS server is used, potentially revealing internal network information. This can happen if an attacker sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:34:04.668530Z"}, {"uuid": "bd0541ef-35ff-4fcd-87b1-ff453a05920b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq76i42nok26", "content": "\ud83d\udccc CVE-2026-48205 - Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component.\n\nThe camel-dns producers read DNS operation... https://www.cyberhub.blog/cves/CVE-2026-48205", "creation_timestamp": "2026-07-09T08:07:07.290405Z"}, {"uuid": "6fdf170d-cce2-44dc-89cf-a9d20c6a89b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "https://t.me/GithubRedTeam/93864", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48205\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 16:03:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T17:00:04.123040Z"}, {"uuid": "3e2941d6-cd9c-42ac-a2a0-9cee11de78e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93864", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48205\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 16:03:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T00:00:25.441005Z"}, {"uuid": "9dc5aeb1-a6cb-4568-a4ee-b7b032189af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-20T18:00:06.379355Z"}, {"uuid": "0bb4f5e7-4283-4d3d-b8cb-c140dbef49d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "seen", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-21T00:00:34.077666Z"}, {"uuid": "5d32429d-0ede-4c36-a0f8-712406161106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48205", "type": "published-proof-of-concept", "source": "Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg", "content": "", "creation_timestamp": "2026-07-22T00:00:06.955242Z"}]}