{"vulnerability": "cve-2026-49097", "sightings": [{"uuid": "11456e27-15d2-44a4-b87a-c5d865d33ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49097", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfypfiwx2f", "content": "CVE-2026-49097: Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users", "creation_timestamp": "2026-07-05T20:27:42.301928Z"}]}