oss-security·18d agoCVE-2026-91006: Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)#apache-karaf#cve-2026-91006#command-injectionCVE-2026-91006 2 sources