CVE-2026-62764 – Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

CVE ID :CVE-2026-62764

Published : July 17, 2026, 9:16 a.m. | 20 minutes ago

Description :Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
An authenticated, but low-privileged user without system permissions may
issue a remote command to gracefully shutdown system components
(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),
leading to a denial of service.

This issue affects Apache Accumulo 2.1.4 and 2.1.5.

Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Severity: 5.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…