Skip to content
OpenAdvisories
High WID-SEC-2026-0182 2 CVEs

Apache Solr: Mehrere Schwachstellen

Published Jan 20, 2026 · Updated May 14, 2026 · Revision 3 · de-DE

Vendor: Apache Vendor: IBM Product: Operational Decision Manager Product: Solr

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

Apache Solr ist ein Suchmaschinen-Server für Unternehmen mit einer REST-ähnlichen API.

Vulnerabilities 2

  • High 8.2
    CVE-2026-22022

    Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

    Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components.  Only deployments tha…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  • High 7.1
    CVE-2026-22444 Public exploit

    Apache Solr: Insufficient file-access checking in standalone core-creation requests

    The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security se…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-3665, EUVD-2026-3666

  3. #1

    Initiale Fassung

References