As cited
Copy frozen at (site build).
vulnerabilities
Apache Pulsar Manager: CVE-2026-105944, missing authentication and admin credential disclosure; end of life
Apache Pulsar Manager has reached end of life and will no longer receive security updates. CVE-2026-105944 affects the project with a CVSS 4.0 score of 10.0 and involves missing authentication, authorization, and disclosure of Pulsar admin credentials.
Why it matters: Organizations running Apache Pulsar Manager must migrate away from the software immediately, as the vulnerability will not be patched and any deployment remains exposed to admin credential theft and unauthorized access.
- Source published
- First seen by Cybersecurity Tracker