UNKNOWN OSS-Security

CVE-2026-28672

CVE-2026-28672: Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

Affected Products

CVE-2026-28672

References

https://www.openwall.com/lists/oss-security/2026/08/09/2

Published: 2026-08-09 · Source: OSS-Security · Feed updated: 2026-08-10

This unknown severity vulnerability was published on 2026-08-09 via OSS-Security. Affected: CVE-2026-28672.

vulnfeed aggregates 8893 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.