CVE-2026-10622

HighCVSS 8.2

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

Improper Authentication in REST API in Collibra Agent allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.

Risk Assessment

An attacker can gain unauthorized access to sensitive data and administrative functions.

Recommendation

Restrict access to REST API endpoints and implement proper authentication mechanisms.

Other vulnerabilities in Collibra Agent

CVE-2026-10621High
Path traversal vulnerability in the restore handler of Collibra Agent. An attacker can write arbitrary files outside the intended extraction directory via a crafted ZIP archive. The agent fails to properly validate and canonicalize file paths during extraction.

Original NVD description (English source)

Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.