https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:34:24.713286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04030 bdu:2019-04030 2026-10-03T07:34:24.816218+00:00 bdu:2019-04030 https://cve.radiocsirt.org/vuln/cnvd-2019-06598 cnvd-2019-06598 2026-10-03T07:34:24.816256+00:00 cnvd-2019-06598 https://cve.radiocsirt.org/vuln/euvd-2026-164879 EUVD-2026-164879 2026-10-03T07:34:24.816271+00:00 EUVD-2026-164879 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0192 fkie_cve-2019-0192 2026-10-03T07:34:24.816284+00:00

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

 https://cve.radiocsirt.org/vuln/ghsa-xhcq-fv7x-grr2 GHSA-xhcq-fv7x-grr2 — Critical severity vulnerability that affects org.apache.solr:solr-core 2026-10-03T07:34:24.816315+00:00

Affected: Maven: org.apache.solr:solr-core

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

 https://cve.radiocsirt.org/vuln/gsd-2019-0192 gsd-2019-0192 2026-10-03T07:34:24.816342+00:00 gsd-2019-0192 https://cve.radiocsirt.org/vuln/rhsa-2019:2413 RHSA-2019:2413 — Red Hat Security Advisory: Red Hat Fuse 7.4.0 security update 2026-10-03T07:34:24.816354+00:00

hazelcast: java deserialization in join cluster procedure leading to remote code execution spring-security-core: Unauthorized Access with Spring Security Method Security thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution jolokia: system-wide CSRF that could lead to Remote Code Execution spring-security-oauth: Privilege escalation by manipulating saved authorization request solr: remote code execution due to unsafe deserialization wildfly: Race condition on PID file allows for termination of arbitrary processes by local users

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0192 UBUNTU-CVE-2019-0192 2026-10-03T07:34:24.816384+00:00

Affected: Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.