CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr Scanner This repository contains a Go-based scanner for detecting and testing Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution RCE conditions. The tool can scan a single target or a list of targets, detect...

solrradar

Mass Reconnaissance & Exploitation Framework for Apache Solr Velocity Template Injection → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigation Disclaimer...

VulnCheck KEV: CVE-2026-44825

Hardcoded credentials in the Basic Authentication setup tool bin/solr auth enable in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials installed silently alongside the user-specifi...

org.apache.solr:solr-jwt-auth (10.0.0) potentially affected by CVE-2026-44825 via org.apache.solr:solr-core (10.0.0)

org.apache.solr:solr-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr-jwt-auth 10.0.0 Source cves: CVE-2026-44825 Source advisory: OSV:GHSA-QHR7-H655-PW6R...

CVE-2026-44825

creationtimestamp| type| source ---|---|--- 2026-05-29 21:32:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmzieoqu7j2u 2026-06-01 09:37:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116674176977845715 2026-06-01 12:40:19+00:00| seen|...