Login Request a demo
AR
Product
Apache Ranger
by Apache Software Foundation · last CVE Aug 10, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 6High 3Medium 2Low 0
Severity
All severities11Critical6High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Ranger to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28672
9.8
3%
Aug 10
Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
Affected: 0.6 through 2.8
CVE-2026-40920
9.8
1%
Aug 10
Apache Ranger: Privilege Escalation via URL Parameter
Affected: through 2.8.0
CVE-2026-42537
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution via JDBC URL Injection
Affected: through 2.8.0
CVE-2026-44416
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Affected: through 2.8.0
CVE-2026-55799
9.8
1%
Aug 10
Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
Affected: through 2.8.0
CVE-2025-59059
9.8
1%
Mar 3
Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator
Affected: through 2.7.0
Showing 6