Apache Solr vulnerabilities and fixes

CVEs that mention Apache Solr, ranked by priority. 4 tracked.

Apache Solr has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-10-23. Highest priority: CVE-2026-19678 (score 43/100).

• CVE-2026-19678 HIGH 8.7 A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in o
• CVE-2026-55442 MEDIUM 5.3 The Goobi viewer is a web application that allows digitised material to be displayed in a web browser
• CVE-2026-55444 MEDIUM 5.3 The Goobi viewer is a web application that allows digitised material to be displayed in a web browser
• CVE-2026-55465 MEDIUM 5.3 The Goobi viewer is a web application that allows digitised material to be displayed in a web browser

FAQ

How do I fix Apache Solr vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Apache Solr being exploited right now?

None of the tracked Apache Solr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Apache Solr CVE should I patch first?

CVE-2026-19678 currently ranks highest (43/100): A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in o.

← Back to latest CVEs