Do Son Four Apache Karaf vulnerabilities, including CVE-2026-92142, let viewer and manager users reach admin or RCE. Upgrade to Karaf 4.4.12 now.
Apache Karaf
Apache Karaf Decanter flaw CVE-2026-24656 allows unauthenticated attackers to crash the log collector via deserialization. Update to v2.12.0 immediately.
CVE-2022-40145 is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL.