CVE-2026-32227— Apache Ranger: SQL Injection vulnerability in lookup functionality
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache Ranger | 2.0.0≤ 2.8.0 | unknown |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-32227
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Ranger: SQL Injection vulnerability in lookup functionality
Source: CVE Program / CVE List V5
Vulnerability Description
SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Ranger | - | - |
II. Public POCs for CVE-2026-32227
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-32227
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-32227 (1)
Same Patch Batch · Apache Software Foundation · 2026-08-10 · 15 CVEs total
| CVE-2026-44630 | Apache IoTDB: RPC service denial of service via unchecked Thrift string length | |
| CVE-2026-65948 | Apache Ranger: UnixAuth lacks brute-force protection | |
| CVE-2026-65945 | Apache Ranger: Logs contain replayable JWT bearer tokens | |
| CVE-2026-65942 | Apache Ranger: Clients accept TLS certificates issued for other hostnames | |
| CVE-2026-55814 | Apache Ranger: Download APIs expose plugin data without authentication | |
| CVE-2026-55799 | Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator | |
| CVE-2026-44416 | Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation | |
| CVE-2026-42537 | Apache Ranger: Remote Code Execution via JDBC URL Injection | |
| CVE-2026-40920 | Apache Ranger: Privilege Escalation via URL Parameter | |
| CVE-2026-28672 | Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder | |
| CVE-2026-61899 | Apache Tapestry: Possible classpath file download through URL manipulation | |
| CVE-2026-68870 | Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope gua | |
| CVE-2026-68871 | Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves a | |
| CVE-2026-68872 | Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard by |
IV. Related Vulnerabilities
Same product: Apache Ranger
- CVE-2026-28672
Apache Ranger: OS Command Injection via Username in UnixUser - CVE-2026-40920
Apache Ranger: Privilege Escalation via URL Parameter - CVE-2026-42537
Apache Ranger: Remote Code Execution via JDBC URL Injection - CVE-2026-44416
Apache Ranger: Remote Code Execution via Arbitrary Class Ins - CVE-2026-55799
Apache Ranger: Remote Code Execution Vulnerability in GraalS
Same vendor: Apache Software Foundation
- CVE-2026-68872
Apache Airflow Amazon provider: amazon SSM / Secrets Manager - CVE-2026-68871
Apache Airflow Yandex provider: yandex Lockbox backend: team - CVE-2026-68870
Apache Airflow Microsoft Azure provider: microsoft.azure Key - CVE-2026-61899
Apache Tapestry: Possible classpath file download through UR - CVE-2026-28672
Apache Ranger: OS Command Injection via Username in UnixUser
Same weakness: CWE-89
- CVE-2026-19425
Win Men Intermational｜Travel Agency Management System - SQL - CVE-2026-66770
SQL Injection vulnerability in SAP Social Intelligence - CVE-2026-72908
ERPNext: Possibility of SQL injection due to missing validat - CVE-2025-13294
Unauthenticated SQL Injection - CVE-2026-72899
Metabase SQL injection via public card or dashboard
V. Comments for CVE-2026-32227
No comments yet