{"vulnerability": "cve-2026-91012", "sightings": [{"uuid": "6559d7f1-809b-4ec3-9257-6cd0934eddfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4zjfy64trdbs5", "content": "CVE-2026-91012 - Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation\nCVE ID : CVE-2026-91012\n \n Published : Sept. 29, 2026, 8:34 a.m. | 12\u00a0minutes ago\n \n Description : org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, pr...", "creation_timestamp": "2026-09-29T09:12:32.877743Z"}, {"uuid": "41e789a5-8c7e-46b7-84c5-88b57ec08d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5bsm3je2h", "content": "CVE-2026-91012 - apache karaf\nApache Karaf lets users with the manager role change any configuration file the service can write to, including files that control admin permissions. By supplying\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekaraf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:07.249452Z"}]}