Q: What is the authoritative source for CVE-2026-40920?

CVE-2026-40920 (CVE-2026-40920) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2026-40920 — CVE-2026-40920?

Accepted Answer

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Question 2

What is the authoritative source for CVE-2026-40920?

Accepted Answer

CVE-2026-40920 (CVE-2026-40920) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.19% probability of exploitation · percentile 8.6% · 2026-08-11T12:00:17Z
Last modified	2026-08-10

CVE-2026-40920CVE-2026-40920

Description

Scoring