CVE-2026-47896

HighCVSS 7.5

Published: 03/07/2026(UTC)Updated: 08/07/2026(UTC)Translated: 09/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

A Path Traversal vulnerability in the Apache Lucene.Net.Replicator library allows unrestricted file reading outside the restricted directory. The issue affects versions from 4.8.0-beta00005 through 4.8.0-beta00017.

Risk Assessment

An attacker can exploit this flaw to read sensitive system files or application data, leading to information disclosure.

Recommendation

Upgrade Apache Lucene.Net.Replicator to version 4.8.0-beta00018 or later immediately.

Other vulnerabilities in Apache Lucene.Net.Replicator

CVE-2026-47897High
A Path Traversal vulnerability in the Lucene.Net.Replicator library allows unauthorized access to files outside the restricted directory. Affected versions are from 4.8.0-beta00005 to 4.8.0-beta00017.

Original NVD description (English source)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library). This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 through 4.8.0-beta00017. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes the issue.