Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CGA-768j-669j-2m75
published 2 months ago
Summary
No summary available.
What to do
- Update chainguard solr-9-full to version 9.10.1-r14.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | solr-9-full |
< 9.10.1-r14 Fix: upgrade to 9.10.1-r14
|
Original advisory text
CGA-768j-669j-2m75
References
- https://www.mchange.com/projects/c3p0/#configuring_security URL
- https://www.mchange.com/projects/c3p0/#security-note URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27727... Vendor Advisory
- https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-2... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-27727 Vendor Advisory
- https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27727.json URL
- https://access.redhat.com/errata/RHSA-2026:14873 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:14874 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:18054 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:18055 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:18059 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34365 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:3890 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:4285 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-27727 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2442671 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published26 Aug 2026
Updated16 Sep 2026
First seen16 Sep 2026
Sources
CGA-768j-669j-2m75 · OSV
Track software like this
Free during beta