Unrated severityNVD Advisory· Published Jul 3, 2026· Updated Jul 6, 2026
Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server
CVE-2026-47896
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).
This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 through 4.8.0-beta00017.
Users are recommended to upgrade to version 4.8.0-beta00018, which fixes the issue.
Patches
Vulnerability mechanics
References
1- lists.apache.org/thread/7y9gbt17p55fh1zltks4pnh719wq9sqtmitrevendor-advisory
News mentions
0No linked articles in our index yet.