Threats Tagged 'cve-2026-105936'
View all threats tagged with 'cve-2026-105936'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-105936'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-105936 is a missing authorization vulnerability in Apache Pulsar's Functions worker REST API. It allows any authenticated user to access the catalog of Pulsar IO connectors via deprecated endpoints without requiring super-user privileges. The disclosed information is limited to connector metadata such as names and descriptions, without exposing configuration values or credentials. The issue affects versions from 2.4.1 up to but excluding 4.0.14 and from 4.1.0 up to but excluding 4.2.5. Fixed versions enforce super-user access on these endpoints. Join the discussion | CVE Database V5 | 10/21/2026, 18:11:20 UTC Added: 10/21/2026, 18:31:41 UTC |
Showing 1 to 1 of 1 result