AK
Product
Apache Karaf
8
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 4Medium 1Low 1
Watch
Add Apache Karaf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91048 | 9.8 | Sep 29 | Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create Affected: before 4.4.12 |
| CVE-2026-91012 | 9.8 | Sep 29 | Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation Affected: before 4.4.12 |
Showing 2