The vulnerability identified as CVE-2026-93563 affects the Red Hat build of Apache Camel for Spring Boot 4. It is caused by unbounded accumulation of multi-line SMTP responses in the SmtpResponseDecoder, which can exhaust memory resources and result in a denial-of-service condition. The CVSS v3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and impact limited to availability. There is no indication of active exploitation in the wild. No affected versions or patch information are explicitly provided in the input data. The vendor advisory is referenced but does not specify remediation details in the provided content.

Successful exploitation of this vulnerability can cause a denial-of-service by exhausting memory resources on the affected system, leading to service unavailability. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2026-93563 for current remediation guidance. Until a patch or official fix is available, consider limiting exposure of the affected service to untrusted networks or applying any recommended temporary mitigations from Red Hat.