CVE-2026-105937 - Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data
CVE ID :CVE-2026-105937 Published : Oct. 21, 2026, 7:16 p.m. | 50 minutes ago Description :Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is selected by setting the reserved topic property...