PT-2026-60732 · Apache · Apache Accumulo

Fabian Fleischer · CVE-2026-62764 · Published 2026-07-17 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions Apache Accumulo versions 2.1.4 through 2.1.5

Description An authenticated user with low privileges and no system permissions can issue remote commands to gracefully shut down system components, including the compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver. This improper handling of insufficient privileges can result in a denial of service.

Recommendations Upgrade to version 2.1.6.

Fix

Weakness Enumeration

CWE-274

Related Identifiers

CVE-2026-62764

Affected Products

Apache Accumulo

References · 8

• https://accumulo.apache.org/downloads · Patch
• https://lists.apache.org/thread/qclg736k93oqn4qrpw9wxjbb3jhn6gm1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-62764 · Security Note
• https://accumulo.apache.org/release/accumulo-2.1.6 · Vendor Advisory
• https://github.com/apache/accumulo/issues/6478 · Note
• http://openwall.com/lists/oss-security/2026/07/17/6 · Note
• https://twitter.com/infoflowcloud/status/2078108934112419912 · Twitter Post
• https://twitter.com/CVEnew/status/2078108038410432731 · Twitter Post