CVE-2025-59059

published 2026-03-03

CVE-2025-59059: Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version…

Priority P2 65 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	ranger	< 2.8.0	2.8.0
apache_software_foundation	apache_ranger	<= 2.7.0	—

Detection & IOCs extracted from sources · hover to see the quote

• · Vulnerability exists in Apache Ranger versions <= 2.7.0 via NashornScriptEngineCreator; fixed in 2.8.0. No public exploit, no CISA KEV listing, and no concrete IOCs (hashes, domains, IPs, signatures, commands) are present in the available sources. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94