CVE-2026-65942

概要

参考情報

• lists.apache.org/thread/pp6on4yyht3z8l0ktfo1xydhjzjbn4gt · Mailing List
• openwall.com/lists/oss-security/2026/08/09/9 · Mailing List

ranger のその他の脆弱性

• CVE-2026-65948高 7.3UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.  Note:  UnixAuth is NOT a recommended option for production deploy…
• CVE-2026-65945中 6.5Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this is…
• CVE-2026-55814高 7.5Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes t…
• CVE-2026-55799緊急 9.8Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0,…
• CVE-2026-44416緊急 9.8Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. Users are recommended…