VDB
CVE-2026-10622
CVE-2026-10622
PUBLISHED
CVSS 8.2 HIGH
Reported by certcc · Published June 2, 2026
Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.
Risk Scores
CVSS 3.1
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Collibra | Collibra Platform (on-prem) | 2026.03 |
| Collibra | Collibra Platform (on-prem) | 2025.10 |
| Collibra | Collibra Platform (SaaS) | 2026.04 |
| Collibra | Collibra Platform (SaaS) | 2026.03 |
| Collibra | Collibra Platform (SaaS) | 2026.02 |
| Collibra | Collibra Platform (SaaS) | 2025.11 |
| Collibra | Collibra Platform (SaaS) | 2025.10 |
| Collibra | Collibra Platform (on-prem) | 2026.03, 2025.10 |
| Collibra | Collibra Platform (SaaS) | 2026.04, 2026.03, 2026.02 |
Timeline
- Jun 2, 2026 CVE Published
- Jun 2, 2026 CVE Updated
- Jun 5, 2026 EPSS Score
- Jun 11, 2026 Coalition ESS Score