TYPO3-EXT-SA-2026-025: Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

TYPO3-EXT-SA-2026-025: Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

TYPO3-EXT-SA-2026-025: Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

CVE-2026-48203

A flaw was found in the Apache Camel Solr component. A remote unauthenticated attacker can inject Solr query parameters and document fields into requests by utilizing specific header prefixes SolrParam. and SolrField. that bypass the HTTP header filter. This improper input validation allows for...

CVE-2020-10204

creationtimestamp| type| source ---|---|--- 2026-08-19 15:00:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-10204.yaml 2026-08-20 00:00:17+00:00| confirmed|...

Apache Solr <=8.3.1 - Remote Code Execution

Apache Solr versions 5.0.0 to 8.3.1 are vulnerable to remote code execution vulnerabilities through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable,...

Server-Side Request Forgery

Apache Camel Solr component is vulnerable to Server-Side Request Forgery. The vulnerability is due to insufficient validation of SolrParam. and SolrField. headers, where attacker-controlled HTTP headers can inject arbitrary Solr request parameters or document fields, allowing unauthorized...

CLEANSTART-2026-AX62295 Security fixes in solr 9.8.0-r0

Package solr version 9.8.0-r0 fixes 5 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-j288-q9x7-2f5v, CVE-2025-48924, ghsa-7p63-w6x9-6gr7, CVE-2025-12383...

CLEANSTART-2026-RU93770 Security fixes in solr 9.8.1-r1

Package solr version 9.8.1-r1 fixes 7 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2025-5115...

CLEANSTART-2026-PU88836 Security fixes in solr 9.8.1-r0

Package solr version 9.8.1-r0 fixes 3 vulnerabilities: ghsa-3qp7-7mw8-wx86, ghsa-x4gw-5cx5-pgmh, ghsa-w573-9ffj-6ff9...

CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6

Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...

CLEANSTART-2026-SE33526 Security fixes in solr 9.8.1-r2

Package solr version 9.8.1-r2 fixes 4 vulnerabilities: CVE-2026-2332, CVE-2024-6763, CVE-2025-11143, CVE-2026-10050...

VulnCheck KEV: CVE-2026-44825

Hardcoded credentials in the Basic Authentication setup tool bin/solr auth enable in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials installed silently alongside the user-specifi...

CLEANSTART-2026-CG99434 Security fixes for CVE-2025-12383, CVE-2025-68161, CVE-2026-22022, CVE-2026-22444, CVE-2026-24281, CVE-2026-24308, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-34481, ghsa-3pxv-7cmr-fjr4, ghsa-3qp7-7mw8-wx86, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-7p63-w6x9-6gr7, ghsa-h383-gmxw-35v2, ghsa-qr3p-2xj2-q7hq, ghsa-vc2w-4v3p-2mqw, ghsa-vc5p-v9hr-52mj, ghsa-w35j-pv5h-q9q9, ghsa-w573-9ffj-6ff9, ghsa-x4gw-5cx5-pgmh applied in versions: 9.10.1-r1, 9.8.1-r0, 9.9.0-r0

Multiple security vulnerabilities affect the solr package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack

The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...

Exploit for Insecure Default Initialization of Resource in Apache Solr

CVE-2026-44825 Apache Solr Scanner This repository contains a...

PYSEC-2026-1248 CKAN may leak Solr credentials via error message in package_search action

If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message Patches This has been patched in CKAN 2.10.5 and 2.11.0...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the improper handling of HTTP headers with the SolrParam. and SolrField. prefixes. An attacker can manipulate Solr query parameters or...

GHSA-4H4F-V54Q-7PQ8 Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...

CVE-2026-48203

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...