Improper Authorization

Apache Accumulo is vulnerable to Improper Authorization. The vulnerability is due to insufficient privilege enforcement on remote shutdown commands, allowing authenticated low-privileged users to shut down system components and cause a denial of service...

org.apache.accumulo:accumulo-compaction-coordinator (>=2.1.4, <=2.1.5), org.apache.accumulo:accumulo-compactor (>=2.1.4, <=2.1.5) +6 more potentially affected by CVE-2026-62764 via org.apache.accumulo:accumulo-server-base (>=2.1.4, <=2.1.5)

org.apache.accumulo:accumulo-server-base MAVEN version =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.5 Source cves: CVE-2026-62764 Source advisory: SNYK:JAVA-ORGAPACHEACCUMULO-18016321...

EUVD-2026-45154

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

CVE-2026-62764

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

CVE-2026-62764

CVE-2026-62764 affects Apache Accumulo 2.1.4 and 2.1.5. An authenticated, low-privilege user without system permissions can remotely issue a command to gracefully shutdown several components (e.g., compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), causing a denial of ...

CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

org.apache.accumulo:accumulo-compaction-coordinator (>=2.1.4, <=2.1.5), org.apache.accumulo:accumulo-compactor (>=2.1.4, <=2.1.5) +6 more potentially affected by CVE-2026-62764 via org.apache.accumulo:accumulo-server-base (>=2.1.4, <=2.1.5)

org.apache.accumulo:accumulo-server-base MAVEN version =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.4, =2.1.5 Source cves: CVE-2026-62764 Source advisory: MEND:CVE-2026-62764...

PT-2026-60732

Name of the Vulnerable Software and Affected Versions Apache Accumulo versions 2.1.4 through 2.1.5 Description An authenticated user with low privileges and no system permissions can issue a remote command to gracefully shut down system components, including the compaction-coordinator, compactor,...

CVE-2026-62764: Improper Handling of Insufficient Privileges

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

EUVD-2023-1824

Malicious code in bioql PyPI...

Apache Accumulo Improper Authentication vulnerability

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

org.apache.accumulo:accumulo-test (2.1.0) potentially affected by CVE-2023-34340 via org.apache.accumulo:accumulo-shell (2.1.0)

org.apache.accumulo:accumulo-shell MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.accumulo:accumulo-shell and may be impacted: - org.apache.accumulo:accumulo-test 2.1.0 Source cves: CVE-2023-34340 Source advisory:...

CVE-2023-34340

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

Authentication flaw

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

CVE-2023-34340

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

CVE-2023-34340

CVE-2023-34340 affects Apache Accumulo 2.1.0. A defect in the user authentication process may allow access despite invalid credentials, per multiple sources. Upgrade to 2.1.1 is recommended as the remediation in the public advisories (e.g., Apache Accumulo 2.1.1 release notes). The CVSS data in t...