https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T09:34:45.986895+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-solr-2020-13957 BIT-solr-2020-13957 2026-10-23T09:34:46.069177+00:00

Affected: Bitnami: solr

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-23T09:34:46.069236+00:00 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2020-57571 cnvd-2020-57571 2026-10-23T09:34:46.069257+00:00 cnvd-2020-57571 https://cve.radiocsirt.org/vuln/euvd-2026-42102 EUVD-2026-42102 2026-10-23T09:34:46.069271+00:00 EUVD-2026-42102 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13957 fkie_cve-2020-13957 2026-10-23T09:34:46.069282+00:00

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.

 https://cve.radiocsirt.org/vuln/ghsa-3c7p-vv5r-cmr5 GHSA-3c7p-vv5r-cmr5 — Incorrect Authorization in Apache Solr 2026-10-23T09:34:46.069305+00:00

Affected: Maven: org.apache.solr:solr-parent, Maven: org.apache.solr:solr-solrj, Maven: org.apache.solr:solr-core

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions. This issue is patched in 8.6.3.

 https://cve.radiocsirt.org/vuln/gsd-2020-13957 gsd-2020-13957 2026-10-23T09:34:46.069332+00:00 gsd-2020-13957