Product · Apache Software Foundation

Apache Ranger

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2026-28672 Public exploit

Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8.

Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven

Aug 10, 2026
Critical 9.8

CVE-2025-59059 Public exploit

Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Apache Software Foundation Apache Ranger org.apache.ranger:ranger-plugins-common Maven

Mar 3, 2026