Threats Tagged 'cve-2026-105945'
View all threats tagged with 'cve-2026-105945'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-105945'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-105945 is a path traversal vulnerability in Apache Pulsar's Packages Management Service when using the filesystem storage provider. It allows an authenticated user with package permissions on any namespace to access, overwrite, or delete packages in other tenants or namespaces by exploiting improper validation of the version component in package names. This can impact the integrity and availability of Pulsar Functions, Sources, or Sinks that rely on these packages. The vulnerability affects deployments with package management enabled and configured to use the filesystem storage provider. It impacts Apache Pulsar versions from 2.10.0 before 4.0.14 and from 4.1.0 before 4.2.5. Package management is disabled by default, and the default storage provider (Apache BookKeeper) is not affected. Join the discussion | CVE Database V5 | 10/21/2026, 18:18:26 UTC Added: 10/21/2026, 18:31:43 UTC |
Showing 1 to 1 of 1 result