News · via oss-security
CVE-2026-91085: Apache Karaf: config:install missing ACL entry allows privilege escalation to admin
Posted by Jean-Baptiste Onofré on Sep 28 Severity: moderate Affected versions: - Apache Karaf before 4.4.12 Description: Apache Karaf's shell/SSH command security is enforced by per-scope ACL…