What’s Vulnerable › Products

Apache Software Foundation Apache Lucene.Net vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Lucene.Net version is affected

Latest Apache Software Foundation Apache Lucene.Net vulnerabilities

• CVE-2026-47896 — Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server (CVSS 7.5)
• CVE-2026-47898 — Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser (CVSS 9.8)
• CVE-2026-47897 — Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client (CVSS 7.5)
• CVE-2024-43383 — Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator (CVSS 8.1)