← Database

CVE-2026-28672

CRITICAL CVSS: 9.8 Published: 2026-08-10 Modified: 2026-08-17

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8.

Affected Platforms

Apache Ranger

Weakness Type

CWE-77

References