K000160725: Apache Solr vulnerability CVE-2026-22022

Security Advisory Description Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet al...

Linux Distros Unpatched Vulnerability : CVE-2026-22022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's Rule Based Authorization Plugin are vulnerable to allowing unauthorized access to certain So...

CVE-2026-22022

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

com.indoqa.solr:spatial-corridor (8.11.2.0), com.lucidworks.spark:spark-solr (>=3.9.0, <=4.0.4) +76 more potentially affected by CVE-2026-22022 via org.apache.solr:solr-core (>=6.3.0, <=9.10.0)

org.apache.solr:solr-core MAVEN version =6.3.0, =3.9.0, =1.2.0, =0.1.1, =1.2.1, =1.6.0, =2.3.0, =2.3.19.release, =2.0.0, =3.0.1 - nl.inl.blacklab:blacklab 3.0.0 - nl.inl.blacklab:blacklab-convert-and-tag-indexer 3.0.0 and more Source cves: CVE-2026-22022 Source advisory: GHSA-QR3P-2XJ2-Q7HQ...

CVE-2026-22022 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

CVE-2026-22022 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...