CVE-2026-105932

The Apache Pulsar broker admin REST API contains a missing authorization check in endpoints for non-persistent topics (/admin/v2/non-persistent/{tenant}/{namespace}/{topic}/entryFilters). While persistent topics require specific authorization to manage entry filter policies, these non-persistent ...