CVE-2026-62764

EUVD-2026-45154

17.07.2026, 09:16

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
An authenticated, but low-privileged user without system permissions may
issue a remote command to gracefully shutdown system components
(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),
leading to a denial of service.

This issue affects Apache Accumulo 2.1.4 and 2.1.5.

Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 38.86%

Affected Products (NVD)

Vendor	Product	Version
apache	accumulo	2.1.4 ≤ 𝑥 < 2.1.6

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-274 - Improper Handling of Insufficient Privileges
The software does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

References

https://accumulo.apache.org/downloads/

https://accumulo.apache.org/release/accumulo-2.1.6/

https://github.com/apache/accumulo/issues/6478

https://lists.apache.org/thread/qclg736k93oqn4qrpw9wxjbb3jhn6gm1

http://www.openwall.com/lists/oss-security/2026/07/17/6