CVE-2026-62764Disclosure(apache / accumulo)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apache accumulo systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), leading to a denial of service. This issue affects Apache Accumulo 2.1.4 and 2.1.5. Users are recommended to upgrade to version 2.1.6, which fixes the issue.

apache CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/apache/accumulo/issues/6478

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-274

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

accumulo

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 3 mentions (2026-07-17); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

apache

Products

accumulo

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-17	3	Disclosure2Patch1
2026-07-19	1	Disclosure1

Full discourse4 posts

Open Source Security mailing list@oss_security89d
Disclosure
CVE-2026-62764: Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions https://www.openwall.com/lists/oss-security/2026/07/17/6 Severity: moderate Accumulo is a sorted, distributed key/value store
Post summary
A moderate‑severity CVE (CVE‑2026‑62764) in Apache Accumulo allows any user to trigger a graceful shutdown of services without proper permissions, enabling a denial‑of‑service impact.
00020559
4.7K followersView on X
Infoflowcloud@infoflowcloud90d
Disclosure
🚨*CVE* CVE-2026-62764 Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote… https://www.cve.org/CVERecord?id=CVE-2026-62764 ----- Traducción: CVE-2026-62764 Man… http://infoflow.cloud`
Post summary
A brief disclosure of CVE‑2026‑62764 is provided, outlining an insufficient‑privilege remote exploitation scenario in Apache Accumulo, without any PoC, exploit tool, or patch information.
0000021
92 followersView on X
CVE@CVEnew90d
Disclosure
CVE-2026-62764 Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote… https://www.cve.org/CVERecord?id=CVE-2026-62764
Post summary
The text simply announces the vulnerability and provides basic details, with no evidence of PoC, exploit code, active exploitation, or remediation.
00000616
57.8K followersView on X
VulniPulse@vulnipulse91d
Patch
⚠️ Apache Accumulo alert: CVE-2026-62764 (CVSS 5.7) Authenticated administrators could disrupt service or cause a denial of service. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/apache-cve-2026-62764 #Apache #ApacheAccumulo #CyberSecurity #CVE
Post summary
Apache Accumulo CVE-2026-62764 permits authenticated administrators to cause service disruption; a vendor‑listed fixed release is available and users should upgrade.
0000021
6 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	accumulo	-	-	-

Explore more

Back to dashboard apache CVEs accumulo vulnerabilities

What researchers are saying

CVE-2026-62764

VulniPulse[verified]@vulnipulsePatch

Apache Accumulo CVE-2026-62764 permits authenticated administrators to cause service disruption; a vendor‑listed fixed release is available and users should upgrade.

Open Source Security mailing list@oss_securityDisclosure

A moderate‑severity CVE (CVE‑2026‑62764) in Apache Accumulo allows any user to trigger a graceful shutdown of services without proper permissions, enabling a denial‑of‑service impact.

Infoflowcloud@infoflowcloudDisclosure

A brief disclosure of CVE‑2026‑62764 is provided, outlining an insufficient‑privilege remote exploitation scenario in Apache Accumulo, without any PoC, exploit tool, or patch information.

CVE@CVEnewDisclosure

The text simply announces the vulnerability and provides basic details, with no evidence of PoC, exploit code, active exploitation, or remediation.