CVE-2026-55814

A flaw was found in Apache Ranger. This vulnerability allows a remote attacker to access sensitive plugin data through the download APIs without requiring any authentication. This unauthorized access can lead to information disclosure, potentially exposing critical configuration or operational...

CVE-2026-55814

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-55814

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-55814

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-55814 Apache Ranger: Download APIs expose plugin data without authentication

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

PT-2026-69432

Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 2.9.0 Description Authentication is missing in the Download APIs, which could allow unauthorized access to resources. Recommendations Upgrade to version 2.9.0...

CVE-2026-55814: Missing Authentication for Critical Function

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...