Threats Tagged 'cve-2026-12894'
View all threats tagged with 'cve-2026-12894'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-12894'
Click on any threat for detailed analysis and mitigation recommendations
0 A Server-Side Template Injection (SSTI) vulnerability (CVE-2026-12894) exists in the ReflectionValueResolver component of the Qute template engine used by Quarkus. This flaw allows an attacker who can influence template text to bypass restrictions and execute unauthorized commands on the server. The issue affects Red Hat Build of Apache Camel 4.18 for Quarkus versions up to 3.33.0. Red Hat has released an update (RHBQ 3.33.3.SP1) addressing this and other vulnerabilities. The update is rated as important by Red Hat Product Security. Join the discussion | GCVE Database | 09/03/2026, 18:34:09 UTC Added: 08/31/2026, 17:51:01 UTC |
0 CVE-2026-12894 is a high-severity server-side template injection vulnerability in the Quarkus Qute template engine. The flaw exists in the ReflectionValueResolver component, which improperly restricts access to sensitive Java internal functions when processing certain data types like Enums. An attacker able to influence template content can exploit this to execute unauthorized commands on the server. Red Hat has issued an important security advisory with updates that address this issue in affected versions. Join the discussion | CVE Database V5 | 08/31/2026, 12:14:12 UTC Added: 08/31/2026, 12:37:43 UTC |
Showing 1 to 2 of 2 results