SQL Injection Vulnerability in Apache Ranger by Apache
CVE-2026-32227

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Ranger
Vendor: CVE Published:; 10 August 2026

What is CVE-2026-32227?

An SQL Injection vulnerability in Apache Ranger poses a risk by allowing attackers to manipulate SQL queries, potentially compromising data integrity and confidentiality. Users are advised to update to version 2.9.0, which addresses this vulnerability and enhances overall security.

Affected Version(s)

Apache Ranger 2.0.0

References

https://lists.apache.org/thread/1zltfzd6rp683omrlv1zkxvkw...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 10, 2026
Vulnerability Reserved
Mar 11, 2026

Credit

罗鑫 <lx2317103712@gmail.com>

CVE-2026-32227 Data

JSON