Apache-Solr — PoC Archivehttps://poc.intelseclab.com/tags/apache-solr/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Apache Solr Velocity Template Injection RCE (CVE-2026-44825)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44825-apache-solr-velocity-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44825-apache-solr-velocity-rce/Critical severity (CVSS 9.8) — web · CVE-2026-44825. Status: PoC. Affects: Apache Solr (VelocityResponseWriter / wt=velocity). Tags: apache-solr, velocity, ssti, template-injection, rce, java, default-credentials.webCriticalapache-solrvelocitysstitemplate-injectionrcejavadefault-credentialsApache Solr UNC Path Validation Bypass to RCE (CVE-2026-22444)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22444-solr-unc-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22444-solr-unc-rce/Critical severity — web · CVE-2026-22444. Status: Weaponized. Affects: Apache Solr, standalone mode, running on Windows. Tags: apache-solr, rce, unc-path, smb, configset, javascript-script-update-processor, windows, cwe-20.webCriticalapache-solrrceunc-pathsmbconfigsetjavascript-script-update-processorwindowscwe-20