CVE WATCH / VULNERABILITY DETAIL
CVE-2026-19678
UNKNOWNCVSS 0NVD feed
Published 23 October 2026 · tracked since 23 October 2026
Description
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54630 CRITICAL 9.6
- CVE-2026-54631 MEDIUM 6.3
- CVE-2026-115536 MEDIUM 4.3
- CVE-2026-115537 MEDIUM 4.3
- CVE-2026-115535 LOW 2.4
- CVE-2026-115534 MEDIUM 4.3
- CVE-2026-114625
- CVE-2026-83938 CRITICAL 10
- CVE-2026-114620 MEDIUM 5.4
- CVE-2026-114615 HIGH 7.4