Missing Authorization

Apache HBase is vulnerable to Missing Authorization. The vulnerability is due to missing owner checks in the fetch and close steps, where the server uses the scanner ID returned by the open step to identify scanner instances but fails to verify that the ID belongs to the requesting user, allowing...

Apache Hbase Unauth Detection

Apache Hbase is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hbase is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Hbase Unauth Detection', 'description': 'Apache Hbase is exposed.'...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: SNYK:JAVA-ORGAPACHEHBASE-19500661...

org.apache.hbase:hbase-assembly (>=2.6.0, <=2.6.4-hadoop3), org.apache.hbase:hbase-examples (>=2.6.0, <=2.6.4-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.6.0, <=2.6.4-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.6.4-hadoop3 Source cves: CVE-2026-49326 Source advisory: SNYK:JAVA-ORGAPACHEHBASE-19500661...

CVE-2026-49326

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

CVE-2026-49326

The Apache HBase thrift and REST delegation services are vulnerable to a Missing Authorization flaw in the scanner handling of the hbase-thrift package. The root cause is a failure to verify ownership during the fetch and close steps of a scan operation; while the open step returns a scanner ID, ...

EUVD-2026-48610

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-beta-1), org.apache.hbase:hbase-examples (>=3.0.0-alpha-1, <=3.0.0-beta-1) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=3.0.0-alpha-1, <=3.0.0-beta-1)

org.apache.hbase:hbase-thrift MAVEN version =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-alpha-1, =3.0.0-beta-1 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.6.0, <=2.6.4-hadoop3), org.apache.hbase:hbase-examples (>=2.6.0, <=2.6.4-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-rest (>=2.6.0, <=2.6.4-hadoop3)

org.apache.hbase:hbase-rest MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.6.4-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-rest (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-rest MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

org.apache.hbase:hbase-assembly (>=2.5.0, <=2.5.13-hadoop3), org.apache.hbase:hbase-examples (>=2.5.0, <=2.5.13-hadoop3) potentially affected by CVE-2026-49326 via org.apache.hbase:hbase-thrift (>=2.5.0, <=2.5.13-hadoop3)

org.apache.hbase:hbase-thrift MAVEN version =2.5.0, =2.5.0, =2.5.0, =2.5.13-hadoop3 Source cves: CVE-2026-49326 Source advisory: MEND:CVE-2026-49326...

CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

PT-2026-64312

Name of the Vulnerable Software and Affected Versions Apache HBase versions 3.0.0-alpha-1 through 3.0.0-beta-1 Apache HBase versions 2.6.0 through 2.6.5 Apache HBase versions 2.5.0 through 2.5.14 Apache HBase versions prior to 2.4.1 Description An authorization flaw exists in the thrift and rest...

CVE-2026-49326: Missing Authorization

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

EUVD-2013-2148

Malware in sbrugna...

EUVD-2019-0402

Malware in sbrugna...

EUVD-2018-0650

Malware in sbrugna...

EUVD-2018-0678

Malware in sbrugna...

Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15

Summary IBM has released the below fix for IBM DataStage on Cloud Pak for Data in response to multiple vulnerabilities found in components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2015-5237 DESCRIPTION: Google Protocol Buffers cou...