CVE-2026-24656

The Apache Karaf Decanter log socket collector is vulnerable to a deserialization of untrusted data vulnerability in versions prior to 2.12.0 . The collector listens on port 4560 without authentication; if the allowed classes property is exposed, the configuration can be bypassed. This flaw allow...