CVE-2026-92142

Apache Karaf is vulnerable to an authorization bypass in its JMX MBeanServer due to a flaw in the KarafMBeanServerGuard. While the guard enforces role-based access control (RBAC) on certain operations, it fails to include the lifecycle methods createMBean, registerMBean, and unregisterMBean. This...