CVE-2026-47897: lucene.net 4.8.0 · update beta00005, 4.8.0 · update beta00006, 4.8.0 · update beta00007 (+10 more affected versions)…

Affected technology

lucene.net · 4.8.0 · update beta00005
apache

lucene.net · 4.8.0 · update beta00006
apache

lucene.net · 4.8.0 · update beta00007
apache

lucene.net · 4.8.0 · update beta00008
apache

lucene.net · 4.8.0 · update beta00009
apache

lucene.net · 4.8.0 · update beta00010
apache

lucene.net · 4.8.0 · update beta00011
apache

lucene.net · 4.8.0 · update beta00012
apache

lucene.net · 4.8.0 · update beta00013
apache

lucene.net · 4.8.0 · update beta00014
apache

lucene.net · 4.8.0 · update beta00015
apache

lucene.net · 4.8.0 · update beta00016
apache

lucene.net · 4.8.0 · update beta00017
apache

Apache Lucene.Net · 4.8.0-beta00005 to before 4.8.0-beta00018
Apache Software Foundation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 8.9/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.