CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr 扫描器 本仓库包含一个基于 Go 的扫描器，用于检测和测试可能受 CVE-2026-44825 影响的 Apache Solr 实例，该漏洞与 Velocity 模板远程代码执行（RCE）条件相关。 该工具可以扫描单个目标或目标列表，检测 Solr 端点，尝试身份验证检查，并可选地运行利用或交互式 RCE 工作流模式。 关于本项目 本项目仅适用于已获得明确许可的环境中的授权安全研究、内部验证和防御性测试。 该扫描器不适用于未经授权访问或滥用第三方系统。 功能 扫描单个目标或包含多个目标的文件 通过常见服务端点检测 Apache Sol...

solrradar

Mass Reconnaissance & Exploitation Framework for Apache Solr Velocity Template Injection → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigation Disclaimer...

VulnCheck KEV: CVE-2026-44825

Hardcoded credentials in the Basic Authentication setup tool bin/solr auth enable in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials installed silently alongside the user-specifi...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +354 more potentially affected by CVE-2026-44825 via org.apache.solr:solr-core (>=1.3.0, <=10.0.0)

org.apache.solr:solr-core MAVEN version =1.3.0, =3.0.0, =3.0.0, =1.8.6, =0.40, =0.40, =0.43.3 and more Source cves: CVE-2026-44825 Source advisory: SNYK:JAVA-ORGAPACHESOLR-17139337...

CVE-2026-44825

creationtimestamp| type| source ---|---|--- 2026-05-29 21:32:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmzieoqu7j2u 2026-06-01 09:37:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116674176977845715 2026-06-01 12:40:19+00:00| seen|...