CVE-2026-10622 - Vulnerability Details - OpenCVE

Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Collibra	Collibra Platform (on-prem) Collibra Platform (saas)

No data.

No data.

References

Link	Providers
https://kb.cert.org/vuls/id/873170
https://www.collibra.com/

History

Wed, 03 Jun 2026 02:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Collibra Collibra collibra Platform (on-prem) Collibra collibra Platform (saas)
Vendors & Products		Collibra Collibra collibra Platform (on-prem) Collibra collibra Platform (saas)

Tue, 02 Jun 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 02 Jun 2026 16:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284 CWE-287

Tue, 02 Jun 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description		Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.
Title		CVE-2026-10622
References		https://kb.cert.org/vuls/id/873170 https://www.collibra.com/

MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2026-06-02T14:01:06.148Z

Updated: 2026-06-02T18:48:35.402Z

Reserved: 2026-06-02T13:59:47.508Z

Link: CVE-2026-10622

Vulnrichment

Updated: 2026-06-02T18:47:15.065Z

NVD

Status : Awaiting Analysis

Published: 2026-06-02T14:16:45.100

Modified: 2026-06-02T20:16:32.940

Link: CVE-2026-10622

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10622", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-06-02T13:59:47.508Z", "datePublished": "2026-06-02T14:01:06.148Z", "dateUpdated": "2026-06-02T18:48:35.402Z"}, "containers": {"cna": {"title": "CVE-2026-10622", "descriptions": [{"lang": "en", "value": "Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Collibra", "product": "Collibra Platform (on-prem)", "versions": [{"status": "affected", "version": "2026.03", "lessThan": "2026.03.356", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (on-prem)", "versions": [{"status": "affected", "version": "2025.10", "lessThan": "2025.10.399", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.04", "lessThan": "2026.04.5", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.03", "lessThan": "2026.03.4", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.02", "lessThan": "2026.02.6", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2025.11", "lessThan": "2025.11.7", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2025.10", "lessThan": "2025.10.9", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}, {"descriptions": [{"lang": "en", "description": "CWE-287 Improper Authentication"}]}], "references": [{"url": "https://www.collibra.com/"}, {"url": "https://kb.cert.org/vuls/id/873170"}], "x_generator": {"engine": "VINCE 3.0.42", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10622"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-02T14:01:06.148Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-02T18:47:28.416220Z", "id": "CVE-2026-10622", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-02T18:48:35.402Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-10622", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-02T18:47:28.416220Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-02T18:47:15.065Z"}}], "cna": {"title": "CVE-2026-10622", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Collibra", "product": "Collibra Platform (on-prem)", "versions": [{"status": "affected", "version": "2026.03", "lessThan": "2026.03.356", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (on-prem)", "versions": [{"status": "affected", "version": "2025.10", "lessThan": "2025.10.399", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.04", "lessThan": "2026.04.5", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.03", "lessThan": "2026.03.4", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2026.02", "lessThan": "2026.02.6", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2025.11", "lessThan": "2025.11.7", "versionType": "custom"}]}, {"vendor": "Collibra", "product": "Collibra Platform (SaaS)", "versions": [{"status": "affected", "version": "2025.10", "lessThan": "2025.10.9", "versionType": "custom"}]}], "references": [{"url": "https://www.collibra.com/"}, {"url": "https://kb.cert.org/vuls/id/873170"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.42", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-10622"}, "descriptions": [{"lang": "en", "value": "Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}, {"descriptions": [{"lang": "en", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-02T14:01:06.148Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10622", "state": "PUBLISHED", "dateUpdated": "2026-06-02T18:48:35.402Z", "dateReserved": "2026-06-02T13:59:47.508Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-06-02T14:01:06.148Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}