You are viewing a plain text version of this content. The canonical link for it is here.
- https://karaf.apache.org/security/cve-2026-92230.txt: CVE-2026-92230: Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/17 15:09:49 UTC, 0 replies.
- [ANNOUNCE] Apache Karaf 4.4.12 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 06:00:35 UTC, 0 replies.
- https://karaf.apache.org/security/cve-2026-90979.txt: CVE-2026-90979: Apache Karaf: LDAP filter injection in JAAS LDAP login modules - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 09:03:25 UTC, 0 replies.
- https://karaf.apache.org/security/cve-2026-91006.txt: CVE-2026-91006: Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean) - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 09:56:28 UTC, 0 replies.
- CVE-2026-91012: Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 15:31:48 UTC, 0 replies.
- CVE-2026-91048: Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 15:52:22 UTC, 0 replies.
- https://karaf.apache.org/security/cve-2026-91085.txt: CVE-2026-91085: Apache Karaf: config:install missing ACL entry allows privilege escalation to admin - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 16:08:52 UTC, 0 replies.
- https://karaf.apache.org/security/cve-2026-92142.txt: CVE-2026-92142: Apache Karaf: Authorization bypass in JMX MBean lifecycle operations - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/09/28 16:17:45 UTC, 0 replies.