Exploit for solrradar

CVE-2026-44825

kitploit · 2026-08-27

Description

Apache Solr CVE-2026-44825 scanner with version detection, credential brute force, and RCE exploit.

Entry point

Parameteraction · query param

Pathadmin/cores?action=STATUS

Status check on cores can be used to enumerate cores without authentication in vulnerable deployments

Affected Apache Solr versions

Apache Solr≤ 9.10.1, 10.0.0

All known vulnerabilities by product

Apache Solr

CVSS 9.8 for CVE-2026-44825

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-27 22:32

Last Seen:2026-08-27 23:39

Reporter:KitPloit

Other exploits for CVE-2026-44825

CVE-2026-44825-Apache-Solr-Scanner

2026-08-27 KitPloitKITPLOIT

Exploit for Insecure Default Initialization of Resource in Apache Solr

2026-07-08 gagaltotalGITHUB

Exploit for Insecure Default Initialization of Resource in Apache Solr

2026-07-03 shinthinkGITHUB

Exploit Code

MARKDOWN8 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SHINTHINK-SOLRRADAR
![SolrRadar — CVE-2026-44825 Scanner Apache Solr](https://raw.githubusercontent.com/shinthink/solrradar/HEAD/assets/banner.svg)

![Python](https://img.shields.io/badge/PYTHON-3.8+-3776AB?style=for-the-badge&logo=python&logoColor=white) ![CVE](https://img.shields.io/badge/CVE-2026--44825-FF0000?style=for-the-badge&logo=apache&logoColor=white) ![License](https://img.shields.io/badge/LICENSE-MIT-97CA00?style=for-the-badge&logo=opensourceinitiative&logoColor=white)

![Threads](https://img.shields.io/badge/%E2%9A%A1-MULTI--THREADED-FF6B00?style=flat-square) ![Version](https://img.shields.io/badge/%F0%9F%8E%AF-VERSION_DETECTION-8A2BE2?style=flat-square) ![Brute](https://img.shields.io/badge/%F0%9F%94%91-CREDENTIAL_BRUTEFORCE-FFD700?style=flat-square) ![RCE](https://img.shields.io/badge/%F0%9F%92%80-RCE_EXPLOIT-000000?style=flat-square) ![Shell](https://img.shields.io/badge/%F0%9F%90%9A-INTERACTIVE_SHELL-8B0000?style=flat-square)

###

Exploit Code

Share

Share on social media: