Login Request a demo
RA
Product
Ranger
by Apache · last CVE Aug 10, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 11High 9Medium 11Low 0
Severity
All severities31Critical11High9Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ranger to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28672
9.8
3%
Aug 10
Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
Affected: 0.6.0 through 2.8.0
CVE-2026-32227
9.8
1%
Aug 10
Apache Ranger: SQL Injection vulnerability in lookup functionality
Affected: before 2.9.0
CVE-2026-40920
9.8
1%
Aug 10
Apache Ranger: Privilege Escalation via URL Parameter
Affected: before 2.9.0
CVE-2026-42537
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution via JDBC URL Injection
Affected: before 2.9.0
CVE-2026-44416
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Affected: before 2.9.0
CVE-2026-55799
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
Affected: before 2.9.0
CVE-2025-59059
9.8
1%
Mar 3
Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0
Affected: before 2.8.0
CVE-2024-55532
9.8
1%
Mar 3
Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0
Affected: before 2.6.0
CVE-2017-7676
9.8
4%
Jun 14
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt
Affected: through 0.7.0
CVE-2016-0733
9.8
3%
Apr 12
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by…
Affected: through 0.5.0
CVE-2024-45479
9.1
1%
Jan 21
SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0
Affected: 2.4.0 before 2.5.0
Showing 11