Junglewise Threat Intelligence

CVE-2026-22022: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

CVE-2026-22022 · Severity: low · CVSS 3.1 · Published 2026-01-21

Technologies: org.apache.solr:solr-core (Maven). Vendors: Maven.

Executive brief

Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

Affected products

  • Maven org.apache.solr:solr-core

Related threats