RHLW-2026-edc9411f6043d0f2

See a problem?
Please try reporting it to the source first.
Source
https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-edc9411f6043d0f2.json
Import Source
https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-edc9411f6043d0f2.json
JSON Data
https://api.osv.dev/v1/vulns/RHLW-2026-edc9411f6043d0f2
Upstream
Published
2026-11-06T09:43:14Z
Modified
2026-11-10T08:30:02Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Lightwell Security Advisory: solr-core 10.0.0.rhlw-00003
Details

Red Hat Lightwell has released org.apache.solr:solr-core 10.0.0.rhlw-00003 with a backported security fix.

CVE-2026-44825: Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

This patched artifact is a drop-in replacement for org.apache.solr:solr-core 10.0.0 from Maven Central.

References
Credits
    • Red Hat Lightwell - REMEDIATION_DEVELOPER

Affected packages

Red Hat Lightwell:Maven / org.apache.solr:solr-core

Package

Name
org.apache.solr:solr-core
Purl
pkg:maven/org.apache.solr/solr-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
10.0.0.rhlw-00003

Affected versions

1.*
1.3.0
1.4.0
1.4.1
3.*
3.1.0
3.2.0
3.3.0
3.4.0
3.5.0
3.6.0
3.6.1
3.6.2
4.*
4.0.0-ALPHA
4.0.0-BETA
4.0.0
4.1.0
4.2.0
4.2.1
4.3.0
4.3.1
4.4.0
4.5.0
4.5.1
4.6.0
4.6.1
4.7.0
4.7.1
4.7.2
4.8.0
4.8.1
4.9.0
4.9.1
4.10.0
4.10.1
4.10.2
4.10.3
4.10.4
5.*
5.0.0
5.1.0
5.2.0
5.2.1
5.3.0
5.3.1
5.3.2
5.4.0
5.4.1
5.5.0
5.5.1
5.5.2
5.5.3
5.5.4
5.5.5
6.*
6.0.0
6.0.1
6.1.0
6.2.0
6.2.1
6.3.0
6.4.0
6.4.1
6.4.2
6.5.0
6.5.1
6.6.0
6.6.1
6.6.2
6.6.3
6.6.4
6.6.5
6.6.6
7.*
7.0.0
7.0.1
7.1.0
7.2.0
7.2.1
7.3.0
7.3.1
7.4.0
7.5.0
7.6.0
7.7.0
7.7.1
7.7.2
7.7.3
8.*
8.0.0
8.1.0
8.1.1
8.2.0
8.3.0
8.3.1
8.4.0
8.4.1
8.5.0
8.5.1
8.5.2
8.6.0
8.6.1
8.6.2
8.6.3
8.7.0
8.8.0
8.8.1
8.8.2
8.9.0
8.10.0
8.10.1
8.11.0
8.11.1
8.11.2
8.11.3
8.11.4
9.*
9.0.0
9.1.0
9.1.1
9.2.0
9.2.1
9.3.0
9.4.0
9.4.1
9.5.0
9.6.0
9.6.1
9.7.0
9.8.0
9.8.1
9.9.0
9.10.0
9.10.1
9.11.0
10.*
10.0.0

Database specific

lightwell 
{
    "backport_base_version": "10.0.0",
    "remediated_version": "10.0.0.rhlw-00003",
    "repository_url": "https://packages.redhat.com/lightwell/java/remediated/"
}
source 
"https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-edc9411f6043d0f2.json"