CVE-2026-105869Vulnerability
Reported by 1 independent source · first reported by INCIBE-CERT · last reported
Last reported 2 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Múltiples vulnerabilidades en productos de Apache“CVE-2026-105869: el proveedor MultiRolesTokenAuthorizationProvider de Apache Pulsar utiliza roles de un JWT sin verificar su firma cuando una solicitud con credenciales no válidas se procesa como usuario anónimo.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-111817, CVE-2026-111813, CVE-2025-31699, CVE-2026-111816, CVE-2026-111811
Thanks — we review every report.