Skip to content
Critical Remote Code Execution Vulnerability in Apache Ranger Identified

Critical Remote Code Execution Vulnerability in Apache Ranger Identified

First seen 4 Mar 2026, 21:10 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

A critical remote code execution vulnerability, CVE-2025-59059, has been discovered in Apache Ranger, specifically affecting the NashornScriptEngineCreator. This vulnerability allows unauthenticated remote attackers to execute arbitrary code, posing a significant risk to affected systems. Immediate action is recommended to mitigate potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

Timeline

2026-03-03
CVE-2025-59059 published
2026-03-04
Warning issued about critical vulnerability in Apache Ranger

More articles in this cluster (2)

Following this threat?

Track CVE-2025-59059 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed