CVE-2026-28672

Apache Ranger versions 0.6 through 2.8 are vulnerable to a command injection flaw due to improper neutralization of special elements. This vulnerability could allow an attacker to execute arbitrary commands on the server, potentially leading to unauthorized access or data manipulation. Organizations using affected versions of Apache Ranger should prioritize remediation to mitigate the risk of exploitation.