AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-55814

HIGH · CVSS 7.5 EPSS 0.48%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Ranger versions 2.8.0 and earlier are vulnerable due to missing authentication in the Download APIs, potentially allowing unauthorized access to sensitive data. Organizations using these versions should prioritize upgrading to 2.9.0 to mitigate the risk of data exposure. This vulnerability is particularly critical for enterprises relying on Apache Ranger for data security and governance.

CVE
CVE-2026-55814
Severity
HIGH
CVSS
7.5
EPSS
0.48%
Apache

Original NVD Description

Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.