What is CVE-2026-40920?
CVE-2026-40920 is a privilege escalation vulnerability via a URL parameter in Apache Ranger versions 2.8.0 and earlier. Affected users are recommended to upgrade to version 2.9.0, which addresses this issue.
Azərbaycanca: CVE-2026-40920 Apache Ranger-in 2.8.0 və daha əvvəlki versiyalarında URL parametri vasitəsilə imtiyaz yüksəltmə (Privilege Escalation) zəifliyidir. Təsirə məruz qalan istifadəçilərə problemi həll edən 2.9.0 versiyasına yeniləmə tövsiyə olunur.
Related CVEs
link basis: shared vendor: Apache
FAQ2
Which versions of Apache Ranger are affected by CVE-2026-40920?
This vulnerability affects Apache Ranger versions 2.8.0 and earlier.
What is the recommended remediation for CVE-2026-40920?
Affected users are recommended to upgrade to version 2.9.0, which fixes the issue.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.