diff --git a/vex-input.json b/vex-input.json
index 2a376ef98..c43a4bf52 100644
--- a/vex-input.json
+++ b/vex-input.json
@@ -1,4 +1,18 @@
 [
+  {
+    "ids": [
+      "CVE-2025-48924"
+    ],
+    "versions": "9.0.0\u20139.9.0",
+    "jars": [
+      "commons-lang3-<version>.jar"
+    ],
+    "analysis": {
+      "state": "not_affected",
+      "justification": "code_not_reachable",
+      "detail": "The vulnerable functionality is only reachable via `commons-configuration2`, which is used in Solr's Hadoop Kerberos support (`solr-hadoop-auth`) to load administrator-provided Hadoop configuration files. As such, the vulnerability is not exploitable in Solr."
+    }
+  },
   {
     "ids": [
       "CVE-2024-51504"