CVE-2026-40920 in Ranger

Prediction

by VulDB Data Team • 08/09/2026

A weakness has been identified in Apache Ranger. Affected is an unknown function of the component URL Parameter. This manipulation causes improper privilege management. Remote exploitation of the attack is possible.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Moderation: accepted
• Entry: VDB-387266
• CPE: ready
• CWE: CWE-269 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-40920
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-40920
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-40920/