Apache Ranger has a Command Injection vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-28672 · ADVISORY
• apache/ranger · PACKAGE
• lists.apache.org/thread/99ysjqcmz950o3jgm6pqx1wb696onzq7 · WEB
• openwall.com/lists/oss-security/2026/08/09/2 · WEB

Weitere Schwachstellen in org.apache.ranger:ranger

• CVE-2024-45479KRITISCH 9.1SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apac…
• CVE-2024-45478MITTEL 4.8Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to versio…
• CVE-2022-45048HOCH 8.8Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This i…
• CVE-2019-12397MITTEL 6.1Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version…
• CVE-2018-11778HOCH 8.8UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow. Versions p…