Threats Tagged 'cve-2026-105927'
View all threats tagged with 'cve-2026-105927'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-105927'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-105927 is an authorization vulnerability in Apache Pulsar's WebSocket service that allows an authenticated user with consume permission on a topic to inject messages into arbitrary topics via the dead letter policy configuration. The WebSocket service does not verify produce permissions on the dead letter topic, enabling unauthorized message injection. This issue affects Apache Pulsar versions from 2.3.0 before 4.0.14 and from 4.1.0 before 4.2.5. The vulnerability does not allow reading, modifying, or deleting existing messages, but injected messages may impact downstream applications depending on their processing logic. The WebSocket service is disabled by default and can be disabled as a mitigation if not required. Join the discussion | CVE Database V5 | 10/21/2026, 18:00:31 UTC Added: 10/21/2026, 18:16:25 UTC |
Showing 1 to 1 of 1 result