CVE-2026-105944 security flaw

Posted by Lari Hotari on Oct 21 The Apache Pulsar PMC has published the following security advisory for Apache Pulsar Manager. Apache Pulsar Manager has reached end of life and has been retired, and these issues will not be fixed. The advisory was announced on users () pulsar apache org: https://lists.apache.org/thread/hol3z7fzhjntwvrv8xqqwx4l4d2jx796 CVE-2026-105944: Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin...

Published 22-Oct-2026 00:44 UTC · First seen 22-Oct-2026 00:43 UTC

Sources

• Open Source Security · 21-Oct-2026