CVE-2026-55814

Опубликовано: 10 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Ссылки

https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f268rj9dh
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/08/09/8
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:ranger:*:*:*:*:*:*:*:*

Версия до 2.9.0 (исключая)

EPSS

Процентиль: 30%

0.00366

Низкий

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVE-2026-55814

CVSS3: 5.3

redhat

около 1 месяца назад

Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

GHSA-r575-fqmx-qqgc

CVSS3: 7.5

github

около 1 месяца назад

Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

EPSS

Процентиль: 30%

0.00366

Низкий

7.5 High

CVSS3

Дефекты

CWE-306