Login Request a demo
AK
Product
Apache Karaf
by Apache Software Foundation · last CVE Sep 29, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 4Medium 1Low 0
Severity
All severities7Critical2High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Karaf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92142
8.8
1%
Sep 29
Apache Karaf: Authorization bypass in JMX MBean lifecycle operations
Affected: before 4.4.12
CVE-2026-91006
8.8
1%
Sep 28
Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)
Affected: before 4.4.12
CVE-2026-92230
7.5
0%
Sep 17
Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching
Affected: before 4.4.11
CVE-2026-90979
7.3
0%
Sep 28
Apache Karaf: LDAP filter injection in JAAS LDAP login modules
Affected: before 4.4.12
Showing 4