Apache Accumulo vulnerabilities

3 CVEs affecting Apache Accumulo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62764, published 2026-07-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-17533, published 2020-12-29. High severity, CVSS 8.1. EPSS: 3.7% chance of exploitation in the next 30 days. Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain…
CVE-2023-34340, published 2023-06-21. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process…
CVE-2026-62764, published 2026-07-17. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown…