CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49326

Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close. The open step will return an id which will be passed back to server for identifying the scanner instances stored at server side. We missed the owner check in fetch and close steps which means a user can fetch rows from the scanner which is opened by other users, and close scanners which belongs to other users. This issue affects Apache HBase:from 3.0.0-alpha-1 through 3.0.0-beta-1, from 2.6.0 through 2.6.5, from 2.5.0 through 2.5.14, through 2.4.*. Users are recommended to upgrade to version 3.0.0-beta-2, 2.6.6 and 2.5.15, which fixes the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 23.5%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-49326

Apache » Hbase » Version: 0.1.0

cpe:2.3:a:apache:hbase:0.1.0
Apache » Hbase » Version: 0.1.1

cpe:2.3:a:apache:hbase:0.1.1
Apache » Hbase » Version: 0.1.2

cpe:2.3:a:apache:hbase:0.1.2
Apache » Hbase » Version: 0.1.3

cpe:2.3:a:apache:hbase:0.1.3
Apache » Hbase » Version: 0.18.0

cpe:2.3:a:apache:hbase:0.18.0
Apache » Hbase » Version: 0.18.1

cpe:2.3:a:apache:hbase:0.18.1
Apache » Hbase » Version: 0.19.0

cpe:2.3:a:apache:hbase:0.19.0
Apache » Hbase » Version: 0.19.1

cpe:2.3:a:apache:hbase:0.19.1
Apache » Hbase » Version: 0.19.2

cpe:2.3:a:apache:hbase:0.19.2
Apache » Hbase » Version: 0.20.0

cpe:2.3:a:apache:hbase:0.20.0
Apache » Hbase » Version: 0.20.1

cpe:2.3:a:apache:hbase:0.20.1
Apache » Hbase » Version: 0.20.2

cpe:2.3:a:apache:hbase:0.20.2
Apache » Hbase » Version: 0.20.3

cpe:2.3:a:apache:hbase:0.20.3
Apache » Hbase » Version: 0.20.4

cpe:2.3:a:apache:hbase:0.20.4
Apache » Hbase » Version: 0.20.5

cpe:2.3:a:apache:hbase:0.20.5
Apache » Hbase » Version: 0.20.6

cpe:2.3:a:apache:hbase:0.20.6
Apache » Hbase » Version: 0.89.20100621

cpe:2.3:a:apache:hbase:0.89.20100621
Apache » Hbase » Version: 0.89.20100726

cpe:2.3:a:apache:hbase:0.89.20100726
Apache » Hbase » Version: 0.90.0

cpe:2.3:a:apache:hbase:0.90.0
Apache » Hbase » Version: 0.90.1

cpe:2.3:a:apache:hbase:0.90.1
Apache » Hbase » Version: 0.90.2

cpe:2.3:a:apache:hbase:0.90.2
Apache » Hbase » Version: 0.90.3

cpe:2.3:a:apache:hbase:0.90.3
Apache » Hbase » Version: 0.90.4

cpe:2.3:a:apache:hbase:0.90.4
Apache » Hbase » Version: 0.90.5

cpe:2.3:a:apache:hbase:0.90.5
Apache » Hbase » Version: 0.90.6

cpe:2.3:a:apache:hbase:0.90.6
Apache » Hbase » Version: 0.92.0

cpe:2.3:a:apache:hbase:0.92.0
Apache » Hbase » Version: 0.92.1

cpe:2.3:a:apache:hbase:0.92.1
Apache » Hbase » Version: 0.92.2

cpe:2.3:a:apache:hbase:0.92.2
Apache » Hbase » Version: 0.92.3

cpe:2.3:a:apache:hbase:0.92.3
Apache » Hbase » Version: 0.94.0

cpe:2.3:a:apache:hbase:0.94.0
Apache » Hbase » Version: 0.94.1

cpe:2.3:a:apache:hbase:0.94.1
Apache » Hbase » Version: 0.94.10

cpe:2.3:a:apache:hbase:0.94.10
Apache » Hbase » Version: 0.94.11

cpe:2.3:a:apache:hbase:0.94.11
Apache » Hbase » Version: 0.94.12

cpe:2.3:a:apache:hbase:0.94.12
Apache » Hbase » Version: 0.94.13

cpe:2.3:a:apache:hbase:0.94.13
Apache » Hbase » Version: 0.94.14

cpe:2.3:a:apache:hbase:0.94.14
Apache » Hbase » Version: 0.94.15

cpe:2.3:a:apache:hbase:0.94.15
Apache » Hbase » Version: 0.94.16

cpe:2.3:a:apache:hbase:0.94.16
Apache » Hbase » Version: 0.94.17

cpe:2.3:a:apache:hbase:0.94.17
Apache » Hbase » Version: 0.94.18

cpe:2.3:a:apache:hbase:0.94.18
Apache » Hbase » Version: 0.94.19

cpe:2.3:a:apache:hbase:0.94.19
Apache » Hbase » Version: 0.94.2

cpe:2.3:a:apache:hbase:0.94.2
Apache » Hbase » Version: 0.94.20

cpe:2.3:a:apache:hbase:0.94.20
Apache » Hbase » Version: 0.94.21

cpe:2.3:a:apache:hbase:0.94.21
Apache » Hbase » Version: 0.94.22

cpe:2.3:a:apache:hbase:0.94.22
Apache » Hbase » Version: 0.94.23

cpe:2.3:a:apache:hbase:0.94.23
Apache » Hbase » Version: 0.94.24

cpe:2.3:a:apache:hbase:0.94.24
Apache » Hbase » Version: 0.94.25

cpe:2.3:a:apache:hbase:0.94.25
Apache » Hbase » Version: 0.94.26

cpe:2.3:a:apache:hbase:0.94.26
Apache » Hbase » Version: 0.94.27

cpe:2.3:a:apache:hbase:0.94.27
Apache » Hbase » Version: 0.94.3

cpe:2.3:a:apache:hbase:0.94.3
Apache » Hbase » Version: 0.94.4

cpe:2.3:a:apache:hbase:0.94.4
Apache » Hbase » Version: 0.94.5

cpe:2.3:a:apache:hbase:0.94.5
Apache » Hbase » Version: 0.94.6

cpe:2.3:a:apache:hbase:0.94.6
Apache » Hbase » Version: 0.94.6.1

cpe:2.3:a:apache:hbase:0.94.6.1
Apache » Hbase » Version: 0.94.7

cpe:2.3:a:apache:hbase:0.94.7
Apache » Hbase » Version: 0.94.8

cpe:2.3:a:apache:hbase:0.94.8
Apache » Hbase » Version: 0.94.9

cpe:2.3:a:apache:hbase:0.94.9
Apache » Hbase » Version: 0.95.0

cpe:2.3:a:apache:hbase:0.95.0
Apache » Hbase » Version: 0.95.1

cpe:2.3:a:apache:hbase:0.95.1
Apache » Hbase » Version: 0.95.2

cpe:2.3:a:apache:hbase:0.95.2
Apache » Hbase » Version: 0.96.1

cpe:2.3:a:apache:hbase:0.96.1
Apache » Hbase » Version: 0.96.1.1

cpe:2.3:a:apache:hbase:0.96.1.1
Apache » Hbase » Version: 0.96.2

cpe:2.3:a:apache:hbase:0.96.2
Apache » Hbase » Version: 0.98.0

cpe:2.3:a:apache:hbase:0.98.0
Apache » Hbase » Version: 0.98.1

cpe:2.3:a:apache:hbase:0.98.1
Apache » Hbase » Version: 0.98.10

cpe:2.3:a:apache:hbase:0.98.10
Apache » Hbase » Version: 0.98.10.1

cpe:2.3:a:apache:hbase:0.98.10.1
Apache » Hbase » Version: 0.98.11

cpe:2.3:a:apache:hbase:0.98.11
Apache » Hbase » Version: 0.98.12

cpe:2.3:a:apache:hbase:0.98.12
Apache » Hbase » Version: 0.98.13

cpe:2.3:a:apache:hbase:0.98.13
Apache » Hbase » Version: 0.98.14

cpe:2.3:a:apache:hbase:0.98.14
Apache » Hbase » Version: 0.98.15

cpe:2.3:a:apache:hbase:0.98.15
Apache » Hbase » Version: 0.98.16

cpe:2.3:a:apache:hbase:0.98.16
Apache » Hbase » Version: 0.98.16.1

cpe:2.3:a:apache:hbase:0.98.16.1
Apache » Hbase » Version: 0.98.2

cpe:2.3:a:apache:hbase:0.98.2
Apache » Hbase » Version: 0.98.3

cpe:2.3:a:apache:hbase:0.98.3
Apache » Hbase » Version: 0.98.4

cpe:2.3:a:apache:hbase:0.98.4
Apache » Hbase » Version: 0.98.5

cpe:2.3:a:apache:hbase:0.98.5
Apache » Hbase » Version: 0.98.6

cpe:2.3:a:apache:hbase:0.98.6
Apache » Hbase » Version: 0.98.6.1

cpe:2.3:a:apache:hbase:0.98.6.1
Apache » Hbase » Version: 0.98.7

cpe:2.3:a:apache:hbase:0.98.7
Apache » Hbase » Version: 0.98.8

cpe:2.3:a:apache:hbase:0.98.8
Apache » Hbase » Version: 0.98.9

cpe:2.3:a:apache:hbase:0.98.9
Apache » Hbase » Version: 0.99.0

cpe:2.3:a:apache:hbase:0.99.0
Apache » Hbase » Version: 0.99.1

cpe:2.3:a:apache:hbase:0.99.1
Apache » Hbase » Version: 0.99.2

cpe:2.3:a:apache:hbase:0.99.2
Apache » Hbase » Version: 1.0.0

cpe:2.3:a:apache:hbase:1.0.0
Apache » Hbase » Version: 1.0.1

cpe:2.3:a:apache:hbase:1.0.1
Apache » Hbase » Version: 1.0.1.1

cpe:2.3:a:apache:hbase:1.0.1.1
Apache » Hbase » Version: 1.0.2

cpe:2.3:a:apache:hbase:1.0.2
Apache » Hbase » Version: 1.1.0

cpe:2.3:a:apache:hbase:1.1.0
Apache » Hbase » Version: 1.1.0.1

cpe:2.3:a:apache:hbase:1.1.0.1
Apache » Hbase » Version: 1.1.1

cpe:2.3:a:apache:hbase:1.1.1
Apache » Hbase » Version: 1.1.2

cpe:2.3:a:apache:hbase:1.1.2
Apache » Hbase » Version: 1.2.0

cpe:2.3:a:apache:hbase:1.2.0
Apache » Hbase » Version: 1.2.6

cpe:2.3:a:apache:hbase:1.2.6
Apache » Hbase » Version: 1.2.6.1

cpe:2.3:a:apache:hbase:1.2.6.1
Apache » Hbase » Version: 1.3.0

cpe:2.3:a:apache:hbase:1.3.0
Apache » Hbase » Version: 1.3.2

cpe:2.3:a:apache:hbase:1.3.2
Apache » Hbase » Version: 1.3.2.1

cpe:2.3:a:apache:hbase:1.3.2.1
Apache » Hbase » Version: 1.4.0

cpe:2.3:a:apache:hbase:1.4.0
Apache » Hbase » Version: 1.4.4

cpe:2.3:a:apache:hbase:1.4.4
Apache » Hbase » Version: 1.4.5

cpe:2.3:a:apache:hbase:1.4.5
Apache » Hbase » Version: 2.0.0

cpe:2.3:a:apache:hbase:2.0.0
Apache » Hbase » Version: 2.0.1

cpe:2.3:a:apache:hbase:2.0.1
Apache » Hbase » Version: 2.0.2

cpe:2.3:a:apache:hbase:2.0.2
Apache » Hbase » Version: 2.0.3

cpe:2.3:a:apache:hbase:2.0.3
Apache » Hbase » Version: 2.0.4

cpe:2.3:a:apache:hbase:2.0.4
Apache » Hbase » Version: 2.0.5

cpe:2.3:a:apache:hbase:2.0.5
Apache » Hbase » Version: 2.1.0

cpe:2.3:a:apache:hbase:2.1.0
Apache » Hbase » Version: 2.1.1

cpe:2.3:a:apache:hbase:2.1.1
Apache » Hbase » Version: 2.1.2

cpe:2.3:a:apache:hbase:2.1.2
Apache » Hbase » Version: 2.1.3

cpe:2.3:a:apache:hbase:2.1.3
Apache » Hbase » Version: 2.1.4

cpe:2.3:a:apache:hbase:2.1.4
Apache » Hbase » Version: 2.2.3

cpe:2.3:a:apache:hbase:2.2.3
Apache » Hbase » Version: 2.2.4

cpe:2.3:a:apache:hbase:2.2.4
Apache » Hbase » Version: 2.2.5

cpe:2.3:a:apache:hbase:2.2.5
Apache » Hbase » Version: 2.2.6

cpe:2.3:a:apache:hbase:2.2.6
Apache » Hbase » Version: 2.2.7

cpe:2.3:a:apache:hbase:2.2.7
Apache » Hbase » Version: 2.3.0

cpe:2.3:a:apache:hbase:2.3.0
Apache » Hbase » Version: 2.3.1

cpe:2.3:a:apache:hbase:2.3.1
Apache » Hbase » Version: 2.3.2

cpe:2.3:a:apache:hbase:2.3.2
Apache » Hbase » Version: 2.3.3

cpe:2.3:a:apache:hbase:2.3.3
Apache » Hbase » Version: 2.3.4

cpe:2.3:a:apache:hbase:2.3.4
Apache » Hbase » Version: 2.3.5

cpe:2.3:a:apache:hbase:2.3.5
Apache » Hbase » Version: 2.3.6

cpe:2.3:a:apache:hbase:2.3.6
Apache » Hbase » Version: 2.3.7

cpe:2.3:a:apache:hbase:2.3.7
Apache » Hbase » Version: 2.4.0

cpe:2.3:a:apache:hbase:2.4.0
Apache » Hbase » Version: 2.4.1

cpe:2.3:a:apache:hbase:2.4.1
Apache » Hbase » Version: 2.4.10

cpe:2.3:a:apache:hbase:2.4.10
Apache » Hbase » Version: 2.4.11

cpe:2.3:a:apache:hbase:2.4.11
Apache » Hbase » Version: 2.4.12

cpe:2.3:a:apache:hbase:2.4.12
Apache » Hbase » Version: 2.4.13

cpe:2.3:a:apache:hbase:2.4.13
Apache » Hbase » Version: 2.4.14

cpe:2.3:a:apache:hbase:2.4.14
Apache » Hbase » Version: 2.4.15

cpe:2.3:a:apache:hbase:2.4.15
Apache » Hbase » Version: 2.4.16

cpe:2.3:a:apache:hbase:2.4.16
Apache » Hbase » Version: 2.4.17

cpe:2.3:a:apache:hbase:2.4.17
Apache » Hbase » Version: 2.4.18

cpe:2.3:a:apache:hbase:2.4.18
Apache » Hbase » Version: 2.4.2

cpe:2.3:a:apache:hbase:2.4.2
Apache » Hbase » Version: 2.4.3

cpe:2.3:a:apache:hbase:2.4.3
Apache » Hbase » Version: 2.4.4

cpe:2.3:a:apache:hbase:2.4.4
Apache » Hbase » Version: 2.4.5

cpe:2.3:a:apache:hbase:2.4.5
Apache » Hbase » Version: 2.4.6

cpe:2.3:a:apache:hbase:2.4.6
Apache » Hbase » Version: 2.4.7

cpe:2.3:a:apache:hbase:2.4.7
Apache » Hbase » Version: 2.4.8

cpe:2.3:a:apache:hbase:2.4.8
Apache » Hbase » Version: 2.4.9

cpe:2.3:a:apache:hbase:2.4.9
Apache » Hbase » Version: 2.5.0

cpe:2.3:a:apache:hbase:2.5.0
Apache » Hbase » Version: 2.5.1

cpe:2.3:a:apache:hbase:2.5.1
Apache » Hbase » Version: 2.5.10

cpe:2.3:a:apache:hbase:2.5.10
Apache » Hbase » Version: 2.5.11

cpe:2.3:a:apache:hbase:2.5.11
Apache » Hbase » Version: 2.5.12

cpe:2.3:a:apache:hbase:2.5.12
Apache » Hbase » Version: 2.5.13

cpe:2.3:a:apache:hbase:2.5.13
Apache » Hbase » Version: 2.5.14

cpe:2.3:a:apache:hbase:2.5.14
Apache » Hbase » Version: 2.5.2

cpe:2.3:a:apache:hbase:2.5.2
Apache » Hbase » Version: 2.5.3

cpe:2.3:a:apache:hbase:2.5.3
Apache » Hbase » Version: 2.5.4

cpe:2.3:a:apache:hbase:2.5.4
Apache » Hbase » Version: 2.5.5

cpe:2.3:a:apache:hbase:2.5.5
Apache » Hbase » Version: 2.5.6

cpe:2.3:a:apache:hbase:2.5.6
Apache » Hbase » Version: 2.5.7

cpe:2.3:a:apache:hbase:2.5.7
Apache » Hbase » Version: 2.5.8

cpe:2.3:a:apache:hbase:2.5.8
Apache » Hbase » Version: 2.5.9

cpe:2.3:a:apache:hbase:2.5.9
Apache » Hbase » Version: 2.6.0

cpe:2.3:a:apache:hbase:2.6.0
Apache » Hbase » Version: 2.6.1

cpe:2.3:a:apache:hbase:2.6.1
Apache » Hbase » Version: 2.6.2

cpe:2.3:a:apache:hbase:2.6.2
Apache » Hbase » Version: 2.6.3

cpe:2.3:a:apache:hbase:2.6.3
Apache » Hbase » Version: 2.6.4

cpe:2.3:a:apache:hbase:2.6.4
Apache » Hbase » Version: 2.6.5

cpe:2.3:a:apache:hbase:2.6.5
Apache » Hbase » Version: 3.0.0

cpe:2.3:a:apache:hbase:3.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49326

Products

Pricing

Contact Us