https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T19:38:24.629245+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-solr-2020-13941 BIT-solr-2020-13941 2026-10-27T19:38:24.714940+00:00

Affected: Bitnami: solr

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

 https://cve.radiocsirt.org/vuln/cnvd-2020-47564 cnvd-2020-47564 2026-10-27T19:38:24.715072+00:00 cnvd-2020-47564 https://cve.radiocsirt.org/vuln/euvd-2026-42087 EUVD-2026-42087 2026-10-27T19:38:24.715094+00:00 EUVD-2026-42087 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13941 fkie_cve-2020-13941 2026-10-27T19:38:24.715106+00:00

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

 https://cve.radiocsirt.org/vuln/ghsa-2467-h365-j7hm GHSA-2467-h365-j7hm — Improper Input Validation in Apache Solr 2026-10-27T19:38:24.715130+00:00

Affected: Maven: org.apache.solr:solr-parent

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

 https://cve.radiocsirt.org/vuln/gsd-2020-13941 gsd-2020-13941 2026-10-27T19:38:24.715153+00:00 gsd-2020-13941 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13941 UBUNTU-CVE-2020-13941 2026-10-27T19:38:24.715164+00:00

Affected: Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.