NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#jmx

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

oss-securitySep 28, 2026high

CVE-2026-92142: Apache Karaf: Authorization bypass in JMX MBean lifecycle operations

Apache Karaf before 4.4.12 has an authorization bypass in JMX MBean lifecycle operations.

2 sources apache-karaf jmx

2

Full DisclosureSep 27, 2026high

[0day-rubbish] Lightstreamer Server 7.4.8 Shipped placeholder JMX/RMI credentials plus MLet remote class loading to root RCE (9.8)

Lightstreamer Server 7.4.8 ships placeholder JMX credentials that enable remote class loading and root code execution.

2 sources lightstreamer jmx

8