apache / ranger
11 known vulnerabilities in apache ranger.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-28672 | Medium | 1.3% | 9.8 | Improper Neutralization of Special Elements used in a Command ('Command Injectio… | |
| CVE-2026-42537 | Medium | 0.7% | 9.8 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are… | |
| CVE-2026-44416 | Medium | 0.7% | 9.8 | Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registr… | |
| CVE-2026-55799 | Medium | 0.6% | 9.8 | Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger… | |
| CVE-2026-40920 | Medium | 0.4% | 9.8 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= … | |
| CVE-2026-55814 | Medium | 0.4% | 7.5 | Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. User… | |
| CVE-2026-32227 | Medium | 0.4% | 9.8 | SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects … | |
| CVE-2026-65948 | Medium | 0.3% | 7.3 | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note:… | |
| CVE-2026-65942 | Medium | 0.3% | 7.5 | TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.… | |
| CVE-2026-65945 | Low | 0.4% | 6.5 | Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are … | |
| CVE-2025-59060 | Low | 0.3% | 5.3 | Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is report… |