CVE-2026-42537

Mô tả

Tham khảo

• lists.apache.org/thread/ymwvz8cwv3wm8fq21pnd7fco0l1m4wrp · Mailing List
• openwall.com/lists/oss-security/2026/08/09/5 · Mailing List

Lỗ hổng khác của ranger

• CVE-2026-65948CAO 7.3UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.  Note:  UnixAuth is NOT a recommended option for production deploy…
• CVE-2026-65945TRUNG BÌNH 6.5Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this is…
• CVE-2026-65942CAO 7.5TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which …
• CVE-2026-55814CAO 7.5Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes t…
• CVE-2026-55799NGHIÊM TRỌNG 9.8Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0,…