Home / Vulnerability Intelligence / CVE-2025-59059

CVE-2025-59059 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 5, 2026

Apache Ranger - Remote Code Execution

Published: March 3, 2026Updated: March 5, 2026Remote Exploitable

Overview

Apache Ranger <= 2.7.0 contains a remote code execution caused by vulnerability in NashornScriptEngineCreator, letting attackers execute arbitrary code remotely, exploit requires no special conditions.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 28.7%(Probability of exploitation in next 30 days)

Impact

Attackers can execute arbitrary code remotely, potentially leading to full system compromise.

Mitigation

Upgrade to version 2.8.0 or later.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 3, 2026

🔴 CVE-2025-59059 - Critical (9.8) Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59059/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 3, 2026

View original post

Related Resources

Details

CVE ID: CVE-2025-59059
Severity: Critical
CVSS Score: 9.8
Type: undefined
Status: confirmed
EPSS: 28.7%
Social Posts: 2

CWE

CWE-94

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

28.7%Probability of exploitation in the next 30 days