{"vulnerability": "cve-2026-40859", "sightings": [{"uuid": "ab5df4eb-8665-4526-a592-b359baab0f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwdepqrkx22", "content": "CVE-2026-40859: Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled", "creation_timestamp": "2026-07-05T19:40:44.318847Z"}, {"uuid": "7439e534-383b-43e4-85c2-94a3f5c3b4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6pbzvshi26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-40859 \u0432 Apache Camel: \u0440\u0438\u0441\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/D49FD858-2714-4D9C-86E1-6AFF94DADB20", "creation_timestamp": "2026-07-09T03:35:17.170606Z"}, {"uuid": "6342c525-b01b-49ae-b5c0-8b116955fe0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "https://t.me/GithubRedTeam/92803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40859\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 08:56:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40859 \u2014 Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:05.427381Z"}, {"uuid": "bd5c05ca-29ca-4601-a4a6-8c55a17db28a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40859\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 08:56:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40859 \u2014 Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:07.517767Z"}, {"uuid": "a612414e-702a-4e2d-a156-c5f7afac291f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-16T19:00:13.177772Z"}, {"uuid": "44db2dda-b798-4628-98bf-fc6dc988d7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-17T00:00:28.520972Z"}, {"uuid": "1d437f9f-61b0-4fb7-a92a-ea3df73a3b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "published-proof-of-concept", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-18T00:00:43.858348Z"}, {"uuid": "2cad0476-0f18-4786-9b63-2b10d69568a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40859", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6zprepps2m", "content": "\ud83d\udccc CVE-2026-40859 - Deserialization of Untrusted Data vulnerability in Apache Camel.\n\nThe camel-vertx-http component deserializes HTTP response bodies carrying the Conten... https://www.cyberhub.blog/cves/CVE-2026-40859", "creation_timestamp": "2026-07-22T00:07:06.858330Z"}]}