CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

CVE-2026-49326: Missing Authorization

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...

PT-2026-64312

Name of the Vulnerable Software and Affected Versions Apache HBase versions 3.0.0-alpha-1 through 3.0.0-beta-1 Apache HBase versions 2.6.0 through 2.6.5 Apache HBase versions 2.5.0 through 2.5.14 Apache HBase versions prior to 2.4.1 Description An authorization flaw exists in the thrift and rest...

org.apache.hbase:hbase-assembly (>=2.5.0, <=3.0.0-beta-1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.15.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - org.apache.hbase:hbase-assembly =2.5.0, =3.0.0-beta-1 Sour...

io.honeycomb:honeycomb-opentelemetry-javaagent (>=0.2.1, <=0.3.0), org.apache.hbase:hbase-assembly (>=3.0.0-alpha-1, <=3.0.0-alpha-3) +2 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.0.1)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.honeycomb:honeycomb-opentelemetry-javaagent =0.2.1,...

EUVD-2019-0402

Malware in sbrugna...

EUVD-2018-0678

Malware in sbrugna...

EUVD-2018-0650

Malware in sbrugna...

EUVD-2013-2148

Malware in sbrugna...

Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15

Summary IBM has released the below fix for IBM DataStage on Cloud Pak for Data in response to multiple vulnerabilities found in components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2015-5237 DESCRIPTION: Google Protocol Buffers cou...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to denial of service due to hbase-client

Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to LDAP injection due to hbase-client

Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2023-25613 DESCRIPTION: Apache Kerby could allow a remote attacker to conduct an LDAP injection, caused by a flaw in LdapIdentityBackend. By sending a request with ...

org.apache.hive:hive-cli (0.8.0), org.apache.hive:hive-contrib (0.8.0) +4 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.8.0)

org.apache.hive:hive-exec MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive:hive-cli 0.8.0 - org.apache.hive:hive-contrib 0.8.0 - org.apache.hive:hive-hbase-handler 0.8....

ch.cern.hbase.connectors.kafka:hbase-kafka-proxy (>=1.0.1_spark-3.0.1_2, <=1.0.1_spark-3.0.1_4), ch.cern.hbase.connectors.spark:hbase-spark (>=1.0.1_spark-3.0.1_2, <=1.0.1_spark-3.0.1_4) +414 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.8.5)

org.apache.hadoop:hadoop-common MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ch.cern.hbase.connectors.kafka:hbase-kafka-proxy =1.0.1spark-3.0.12, =1.0.1spark-3.0.12,...

org.infinispan:infinispan-cachestore-bdbje (5.2.0.beta6), org.infinispan:infinispan-cachestore-cassandra (5.2.0.beta6) +22 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-core (5.2.0.beta6)

org.infinispan:infinispan-core MAVEN version 5.2.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.2.0.beta6 -...

org.infinispan:infinispan-as-modules (5.2.2.final), org.infinispan:infinispan-cachestore-bdbje (5.2.2.final) +23 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-core (5.2.2.final)

org.infinispan:infinispan-core MAVEN version 5.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-modules 5.2.2.final - org.infinispan:infinispan-cachestore-bdbje...

com.geeoz.atom:atom-api (>=1.0d13, <=1.0d26), com.geeoz.atom:atom-services (>=1.0d18, <=1.0d26) +43 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-core (5.2.7.final)

org.infinispan:infinispan-core MAVEN version 5.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api =1.0d13, =1.0d18, =1.0d13, =1.0d13, =6.0.0.final, =7.0.0.alpha1 and...

org.infinispan:infinispan-cachestore-bdbje (5.2.0.beta2), org.infinispan:infinispan-cachestore-cassandra (5.2.0.beta2) +21 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-core (5.2.0.beta2)

org.infinispan:infinispan-core MAVEN version 5.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.2.0.beta2 -...

com.geeoz.atom:atom-api (>=1.0d27, <=1.0d29), com.geeoz.atom:atom-services (>=1.0d27, <=1.0d29) +45 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-core (5.2.10.final)

org.infinispan:infinispan-core MAVEN version 5.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api =1.0d27, =1.0d27, =1.0d27, =1.0d27, =1.0d29 -...