AP
Product
Apache Pulsar
by Apache Software Foundation · last CVE Oct 21, 2026
15
CVEs
0
On KEV
9.2
Max CVSS
14
New 30D
Severity mix
Critical 1High 5Medium 4Low 5
Watch

Add Apache Pulsar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105869
New
9.2
0%
Oct 21
Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role
Affected: 2.8.1 before 4.0.14; 4.1.0 before 4.2.5
Showing 1