CVE-2026-32227

CRITICAL 9.8CVE-2026-32227 · Published 10/08/2026 · updated 23/10/2026

Package	Affected versions	Patched versions
ranger apache	`< 2.9.0`	`2.9.0`

Description

SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue.

References

lists.apache.org/thread/1zltfzd6rp683omrlv1zkxvkwm9d0nd2 · Mailing List
openwall.com/lists/oss-security/2026/08/09/3 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free