CVE-2026-62764

EUVD-2026-45154

17.07.2026, 09:16

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
An authenticated, but low-privileged user without system permissions may
issue a remote command to gracefully shutdown system components
(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),
leading to a denial of service.

This issue affects Apache Accumulo 2.1.4 and 2.1.5.

Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
apache	CNA	5.7 MEDIUM	NETWORK	LOW	LOW	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
apache	accumulo	2.1.4 ≤ 𝑥 ≤ 2.1.5	CNA

Common Weakness Enumeration

CWE-274 - Improper Handling of Insufficient Privileges
The software does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

References

https://accumulo.apache.org/downloads/

https://accumulo.apache.org/release/accumulo-2.1.6/

https://github.com/apache/accumulo/issues/6478

https://lists.apache.org/thread/qclg736k93oqn4qrpw9wxjbb3jhn6gm1

http://www.openwall.com/lists/oss-security/2026/07/17/6