Skip to main content

Apache Ranger EUVDEUVD-2026-55245

| CVE-2026-65948 HIGH
Improper Restriction of Excessive Authentication Attempts (CWE-307)
2026-08-10 apache GHSA-vx4h-hjjm-mwrc
Apache Information Disclosure Apache Ranger
7.3
CVSS 3.1 · Vendor: apache
Share

Severity by source

Vendor (apache) PRIMARY
7.3 LOW
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
vuln.today AI
7.3 HIGH

Network-reachable unauthenticated login endpoint with no attack complexity; low CIA impact because UnixAuth's non-production status limits credential value and downstream blast radius.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (apache).

CVSS VectorVendor: apache

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

4
Analysis Updated
Aug 10, 2026 - 20:33 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Aug 10, 2026 - 20:22 vuln.today
cvss_changed
CVSS changed
Aug 10, 2026 - 20:22 NVD
7.3 (HIGH)
Analysis Generated
Aug 10, 2026 - 11:01 vuln.today

DescriptionCVE.org

UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note:  UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Articles & Coverage 1

News 8 New Apache Vulnerabilities - 8 High Severity, No Public Exploits Aug 11, 2026

AnalysisAI

Brute-force credential attacks against Apache Ranger's UnixAuth component are possible in all versions up to and including 2.8.0, because the authentication endpoint imposes no rate limiting, account lockout, or anti-automation controls (CWE-307). Any deployment that has explicitly configured UnixAuth - a configuration the vendor labels as not recommended for production - exposes its Ranger admin interface to automated password-guessing from unauthenticated network attackers. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation UnixAuth must be explicitly configured as the authentication provider in Apache Ranger - this is a non-default, vendor-discouraged configuration that the advisory explicitly labels as 'NOT a recommended option for production deployments.' The Ranger admin interface port must be reachable over the network from the attacker's position. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 7.3 base score is supported by a network-accessible (AV:N), low-complexity (AC:L), unauthenticated (PR:N) attack with low-across-the-board CIA impact (C:L/I:L/A:L), which accurately characterises the mechanics of an unrestricted brute-force attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation The vendor-released patch is Apache Ranger version 2.9.0, which adds brute-force protection to the UnixAuth code path; upgrade details are in the Apache security advisory at https://lists.apache.org/thread/cx53rbkxkn5hbvzv8ohwvndzrxhc06qf. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: audit all Apache Ranger deployments for UnixAuth configuration and immediately restrict network access to affected admin interfaces using firewall rules that allow only trusted administrative networks and IP ranges. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Apache Ranger

View all
CVE-2026-44416 CRITICAL
9.8 Aug 10

Remote code execution in Apache Ranger 2.8.0 and earlier arises from arbitrary Java class instantiation in the plugin-sc
CVE-2026-42537 CRITICAL
9.8 Aug 10

Remote code execution in Apache Ranger versions up to and including 2.8.0 arises from JDBC URL injection (CWE-94), letti
CVE-2026-40920 CRITICAL
9.8 Aug 10

Privilege escalation in Apache Ranger versions 2.8.0 and earlier allows an attacker to elevate their effective permissio
CVE-2026-65942 HIGH
7.5 Aug 10

TLS hostname verification failure in Apache Ranger Client Code allows network-positioned attackers to intercept sensitiv
CVE-2026-28672 CRITICAL
9.8 Aug 10

Command injection in Apache Ranger versions 0.6 through 2.8 allows attackers to inject and execute operating-system comm
CVE-2026-55799 CRITICAL
9.8 Aug 10

Remote code execution in Apache Ranger versions up to and including 2.8.0 stems from unsafe script evaluation in the Gra
CVE-2026-32227 CRITICAL
9.8 Aug 10

SQL injection in Apache Ranger allows remote attackers to inject arbitrary SQL through the application's data-access lay
CVE-2026-65945 MEDIUM
6.5 Aug 10

JWT tokens written to Apache Ranger logs in versions 2.8.0 and earlier remain replayable, allowing any party with read a
CVE-2026-55814 HIGH
7.5 Aug 10

Unauthenticated access to Apache Ranger Download APIs on versions 2.8.0 and earlier exposes sensitive authorization poli

Same weakness CWE-307 – Improper Restriction of Excessive Authentication Attempts

View all
CVE-2022-33106 CRITICAL POC
9.8
CVE-2026-44596 CRITICAL POC
9.8
CVE-2024-43042 CRITICAL POC
9.8
CVE-2024-39225 CRITICAL POC
9.8
CVE-2024-24767 CRITICAL POC
9.8
CVE-2023-6272 CRITICAL POC
9.8
CVE-2023-6756 CRITICAL POC
9.8
CVE-2023-49443 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-55245 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy