AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-55799

CRITICAL · CVSS 9.8 EPSS 0.86% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

Apache Ranger versions up to 2.8.0 are vulnerable to a remote code execution flaw in the GraalScriptEngineCreator component, potentially allowing attackers to execute arbitrary code on affected systems. Organizations using these versions should prioritize upgrading to 2.9.0 to mitigate the risk of exploitation. This vulnerability poses a significant threat to security, making it crucial for users to address it promptly.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-55799
Severity
CRITICAL
CVSS
9.8
EPSS
0.86%
Apache

Original NVD Description

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.