Apache Software Foundation Accumulo vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apache Software Foundation Accumulo: 1 record(s), with affected versions and fixes.cpe:2.3:a:apache:accumulo
CVE-2026-62764
Medium · 6.5
CWE-274 Jul 17, 2026
Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
An authenticated, but low-privileged user without system permissions may
issue a remote command to gracefully shutdown system components
(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),
leading to a denial of service.
This issue affects Apache Accumulo 2.1.4 and 2.1.5.
Users are recommended to upgrade to version 2.1.6, which fixes the issue.