Skip to main content

Apache Ranger CVE-2026-44416

| EUVDEUVD-2026-55250 CRITICAL
Code Injection (CWE-94)
2026-08-10 apache GHSA-3236-74vm-475v
Apache Code Injection RCE Apache Ranger
9.8
CVSS 3.1 · Vendor: apache
Share

Severity by source

Vendor (apache) PRIMARY
9.8 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
9.8 CRITICAL

Arbitrary class instantiation yields full RCE (C/I/A:H); network-reachable and low-complexity, and the vendor advisory indicates no auth or interaction, so PR:N/UI:N, though PR:N should be deployment-verified.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apache).

CVSS VectorVendor: apache

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Updated
Aug 12, 2026 - 16:34 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Aug 12, 2026 - 16:22 vuln.today
cvss_changed
CVSS changed
Aug 12, 2026 - 16:22 NVD
9.8 (CRITICAL)
Analysis Generated
Aug 10, 2026 - 11:02 vuln.today
CVE Published
Aug 10, 2026 - 10:23 cve.org
HIGH

DescriptionCVE.org

Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Articles & Coverage 1

News 8 New Apache Vulnerabilities - 8 High Severity, No Public Exploits Aug 11, 2026

AnalysisAI

Remote code execution in Apache Ranger 2.8.0 and earlier arises from arbitrary Java class instantiation in the plugin-schema-registry component, letting an attacker who can reach the affected interface load and run attacker-controlled classes and achieve full compromise (CWE-94). The flaw carries a critical CVSS 9.8 and is fixed in Ranger 2.9.0. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation targets the plugin-schema-registry component of Apache Ranger 2.8.0 or earlier, so the attacker must be able to reach that component's interface over the network; the vendor CVSS (AV:N/AC:L/PR:N/UI:N) implies no authentication and no user interaction against a reachable instance. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The signals are mixed: the CVSS vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H) describes an easy, unauthenticated, network-reachable RCE that would normally be top-priority, yet EPSS is only 0.58% (45th percentile), there is no KEV listing, and no public PoC has surfaced - indicating that in-the-wild exploitation is not yet observed and the theoretical severity currently outpaces demonstrated activity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Vendor-released patch: upgrade to Apache Ranger 2.9.0, which remediates the arbitrary class instantiation in plugin-schema-registry; this is the primary and vendor-recommended fix per the Apache advisory (https://lists.apache.org/thread/2gqssqhwkzbpd8jx8q6986cwldr7qkdn). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all Apache Ranger deployments to identify instances running version 2.8.0 or earlier and verify network access controls restricting exposure to the plugin-schema-registry component. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Apache Ranger

View all
CVE-2026-42537 CRITICAL
9.8 Aug 10

Remote code execution in Apache Ranger versions up to and including 2.8.0 arises from JDBC URL injection (CWE-94), letti
CVE-2026-40920 CRITICAL
9.8 Aug 10

Privilege escalation in Apache Ranger versions 2.8.0 and earlier allows an attacker to elevate their effective permissio
CVE-2026-65942 HIGH
7.5 Aug 10

TLS hostname verification failure in Apache Ranger Client Code allows network-positioned attackers to intercept sensitiv
CVE-2026-28672 CRITICAL
9.8 Aug 10

Command injection in Apache Ranger versions 0.6 through 2.8 allows attackers to inject and execute operating-system comm
CVE-2026-55799 CRITICAL
9.8 Aug 10

Remote code execution in Apache Ranger versions up to and including 2.8.0 stems from unsafe script evaluation in the Gra
CVE-2026-32227 CRITICAL
9.8 Aug 10

SQL injection in Apache Ranger allows remote attackers to inject arbitrary SQL through the application's data-access lay
CVE-2026-65945 MEDIUM
6.5 Aug 10

JWT tokens written to Apache Ranger logs in versions 2.8.0 and earlier remain replayable, allowing any party with read a
CVE-2026-55814 HIGH
7.5 Aug 10

Unauthenticated access to Apache Ranger Download APIs on versions 2.8.0 and earlier exposes sensitive authorization poli
CVE-2026-65948 HIGH
7.3 Aug 10

Brute-force credential attacks against Apache Ranger's UnixAuth component are possible in all versions up to and includi

Same weakness CWE-94 – Code Injection

View all
CVE-2023-3519 CRITICAL POC
9.8
CVE-2021-22205 CRITICAL POC
10.0
CVE-2012-0158 HIGH POC
8.8
CVE-2021-44529 CRITICAL POC
9.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8

Same technique Code Injection

View all
CVE-2023-3519 CRITICAL POC
9.8
CVE-2021-22205 CRITICAL POC
10.0
CVE-2024-23692 CRITICAL POC
9.8
CVE-2012-0158 HIGH POC
8.8
CVE-2021-44529 CRITICAL POC
9.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2025-24893 CRITICAL POC
9.8

Share

CVE-2026-44416 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy