CVE Catalog

CVE-2026-32227

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

12th percentile - higher than 12% of all known CVEs

Summary

SQL Injection vulnerability in Apache Ranger. Users are recommended to upgrade to version 2.9.0, which fixes the issue.

Risk Assessment

An attacker can exploit SQL injection to manipulate the database, potentially leading to data leakage or corruption.

Recommendation

Upgrade Apache Ranger to version 2.9.0 or later immediately.

Original NVD description (English source)

SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS