CVE Catalog
CVE-2026-44416
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.58%
45th percentile - higher than 45% of all known CVEs
Summary
Remote Code Execution via Arbitrary Class Instantiation in the plugin-schema-registry component in Apache Ranger <= 2.8.0. Users are recommended to upgrade to version 2.9.0.
Risk Assessment
An attacker can remotely execute arbitrary code on the server, potentially leading to full system and data compromise.
Recommendation
Upgrade Apache Ranger to version 2.9.0 or later immediately.
Original NVD description (English source)
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.