CVE-2026-62764
Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), leading to a denial of service. This issue affects Apache Accumulo 2.1.4 and 2.1.5. Users are recommended to upgrade to version 2.1.6, which fixes the issue.
| CWE | CWE-274 |
| Vendor | apache software foundation |
| Product | apache accumulo |
| Published | Jul 17, 2026 |
| Last Updated | Jul 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache accumulo
Be the first to know when new unknown vulnerabilities affecting apache software foundation apache accumulo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache Accumulo
2.1.4 ≤ 2.1.5
References
github.com: https://github.com/apache/accumulo/issues/6478 accumulo.apache.org: https://accumulo.apache.org/release/accumulo-2.1.6/ accumulo.apache.org: https://accumulo.apache.org/downloads/ lists.apache.org: https://lists.apache.org/thread/qclg736k93oqn4qrpw9wxjbb3jhn6gm1 openwall.com: http://www.openwall.com/lists/oss-security/2026/07/17/6
Credits
🔍 Fabian Fleischer