Package · Maven

org.apache.ranger:ranger

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2026-28672 Public exploit

Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8.

Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven

Aug 10, 2026