{"vulnerability": "cve-2026-46456", "sightings": [{"uuid": "c4e9608d-d802-4143-a694-1f0bb6038061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwewxwxll2f", "content": "CVE-2026-46456: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers", "creation_timestamp": "2026-07-05T20:08:50.397841Z"}, {"uuid": "e433cae0-e65d-4b12-8042-b45078d7afc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywerckq62b", "content": "CVE-2026-46456 - apache camel\nApache Camel's SQS component allows malicious users to inject custom headers into messages. This could be exploited by attackers to manipulate the behavior of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecamel #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:26:08.615083Z"}, {"uuid": "582cb84a-1c21-499e-b052-6962da164abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6pdgalku2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46456 \u0432 Apache Camel AWS2-SQS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0DA5AF62-7C71-4EE1-AFE6-12E81B4C4384", "creation_timestamp": "2026-07-09T03:36:04.417291Z"}, {"uuid": "30fa5bc5-4107-4a7c-8119-e0f72f32a930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq6xrjrva62f", "content": "\ud83d\udccc CVE-2026-46456 - Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component.\n\n\nThe camel-aws2-sqs component map inbound message attributes into the Cam... https://www.cyberhub.blog/cves/CVE-2026-46456", "creation_timestamp": "2026-07-09T06:07:06.834632Z"}, {"uuid": "f3674035-b45b-4b47-b584-08c92d3e321c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "https://t.me/GithubRedTeam/93279", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46456\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 19:02:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-46456 \u2014 Apache Camel camel-aws2-sqs inbound message-attribute header injection (Camel control-header injection via sqs:SendMessage \u2192 downstream producer steering / RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.010776Z"}, {"uuid": "f73a6c94-c51c-46d4-aa87-8be6e896a3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "seen", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-16T19:00:07.969321Z"}, {"uuid": "27f039ca-9c97-4bd2-a54a-6780ff0b6be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "published-proof-of-concept", "source": "Telegram/ebH1a5NEotKwG91diqH39hoyWyfpt3aLkL269Yr45ItICbU", "content": "", "creation_timestamp": "2026-07-17T00:00:09.620371Z"}, {"uuid": "873010cc-e0af-4778-84c8-05ced5d91940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46456", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93279", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46456\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 19:02:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-46456 \u2014 Apache Camel camel-aws2-sqs inbound message-attribute header injection (Camel control-header injection via sqs:SendMessage \u2192 downstream producer steering / RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.788143Z"}]}