Seclists
Critical Remote Code Execution Vulnerability in Apache Ranger Identified
First seen 4 Mar 2026, 21:10 UTC
•
•70.5
Export
Article Content
Browse articles
A critical remote code execution vulnerability, CVE-2025-59059, has been discovered in Apache Ranger, specifically affecting the NashornScriptEngineCreator. This vulnerability allows unauthenticated remote attackers to execute arbitrary code, posing a significant risk to affected systems. Immediate action is recommended to mitigate potential exploitation.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-03-03
CVE-2025-59059 published
2026-03-04
Warning issued about critical vulnerability in Apache Ranger
More articles in this cluster
Continue Reading
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws
Critical Oracle WebLogic Flaw Under Active Exploitation
FamousSparrow APT Expands Targeting to Azerbaijani Energy Sector
Critical Apache HTTP Server Vulnerability Poses Remote Code Execution Risk
Critical RCE Vulnerability in Windchill and FlexPLM Triggers Urgent Alerts