News · via oss-security
CVE-2026-91006: Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)
Posted by Jean-Baptiste Onofré on Sep 28 Severity: moderate Affected versions: - Apache Karaf (org.apache.karaf:org.apache.karaf.instance.core) before 4.4.12 Description: Apache Karaf's…