Skip to main content

Apache Hbase

1 CVEs product

Monthly

CVE-2026-49326 Jul 24, 14:56 MEDIUM This Month

Unauthorized data access in Apache HBase thrift and rest delegation service allows an authenticated low-privilege attacker to fetch rows from scanner instances opened by other users, exposing confidential data. Versions 2.4.x through 2.5.14, 2.6.0–2.6.5, and 3.0.0-alpha-1 through beta-1 are affected. No public exploit code is known and exploitation is not reported in the wild.

Authentication Bypass Apache Apache Hbase Apache Software Foundation
NVD VulDB
CVSS 3.1
6.5
EPSS
0.2%
EPSS 0% CVSS 6.5
MEDIUM This Month

Unauthorized data access in Apache HBase thrift and rest delegation service allows an authenticated low-privilege attacker to fetch rows from scanner instances opened by other users, exposing confidential data. Versions 2.4.x through 2.5.14, 2.6.0–2.6.5, and 3.0.0-alpha-1 through beta-1 are affected. No public exploit code is known and exploitation is not reported in the wild.

Authentication Bypass Apache Apache Hbase +1
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy