CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

TYPO3 Apache Solr Extension Query Injection

TYPO3 Apache Solr extension contains a query injection vulnerability in the txsolrq search parameter due to insufficient neutralization of Solr/Lucene query syntax. An unauthenticated remote attacker can submit field selectors, wildcard operators, and range queries to query fields outside the...