Vulnerabilities

TI-2026-35344 CVE-2026-47896 · GHSA-mggp-f2j5-mm3g

Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server

MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00808 Published 2026-07-03 Fixed in 4.8.0-beta00018 CWE-22

TI-2026-35345 CVE-2026-47897 · GHSA-6j76-xrvp-5rhc

MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00721 Published 2026-07-03 Fixed in 4.8.0-beta00018 CWE-22

TI-2026-35346 CVE-2026-47898 · GHSA-m739-f9cm-66x2

LOW 19

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis.Common library).

CVSS 4.0MEDIUM 4.0 Local High privileges No interaction EPSS 0.00468 Published 2026-07-03 Fixed in 4.8.0-beta00018 CWE-611