agentprime: apache-software-foundation-apache-karafEvery new CVE for apache-software-foundation-apache-karaf.https://agentprime.io/CVE-2026-92142: Apache Karaf: Authorization bypass in JMX MBean lifecycle operationshttps://agentprime.io/advisories/CVE-2026-92142/https://agentprime.io/advisories/CVE-2026-92142/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 08:40:07 GMTCVECVE-2026-91085: Apache Karaf: config:install missing ACL entry allows privilege escalation to adminhttps://agentprime.io/advisories/CVE-2026-91085/https://agentprime.io/advisories/CVE-2026-91085/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 08:39:33 GMTCVECVE-2026-91048: Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-createhttps://agentprime.io/advisories/CVE-2026-91048/https://agentprime.io/advisories/CVE-2026-91048/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 08:34:47 GMTCVEcriticalCVE-2026-91012: Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-91012/https://agentprime.io/advisories/CVE-2026-91012/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 08:34:11 GMTCVEcriticalCVE-2026-91006: Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)https://agentprime.io/advisories/CVE-2026-91006/https://agentprime.io/advisories/CVE-2026-91006/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 10:44:32 GMTCVECVE-2026-90979: Apache Karaf: LDAP filter injection in JAAS LDAP login moduleshttps://agentprime.io/advisories/CVE-2026-90979/https://agentprime.io/advisories/CVE-2026-90979/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 09:34:33 GMTCVECVE-2026-92230: Apache Karaf: Improper release of ClassLoader references via static ThreadLocal cachinghttps://agentprime.io/advisories/CVE-2026-92230/https://agentprime.io/advisories/CVE-2026-92230/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 18:38:29 GMTCVE