Apache Software Foundation Cassandra vulnerabilities

• apache cassandra Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing CVE-2026-32588 Fix available 6.5 MediumApril 7, 2026
• apache cassandra Apache Cassandra: cqlsh history sensitive information leak CVE-2026-27315 Fix available 5.5 MediumApril 7, 2026
• apache cassandra Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass CVE-2026-27314 Fix available 8.8 HighApril 7, 2026
• apache cassandra Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) CVE-2025-26467 Fix available 8.8 HighAugust 25, 2025
• apache cassandra Apache Cassandra: unrestricted deserialization of JMX authentication credentials CVE-2024-27137 Fix available 5.3 MediumFebruary 4, 2025
• apache cassandra Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions CVE-2025-24860 Fix available 5.4 MediumFebruary 4, 2025
• apache cassandra Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions CVE-2025-23015 Fix available 8.8 HighFebruary 4, 2025
• apache cassandra Apache Cassandra: Privilege escalation when enabling FQL/Audit logs CVE-2023-30601 Fix available 7.8 HighMay 30, 2023
• apache cassandra Remote code execution for scripted UDFs CVE-2021-44521 Public exploitFix available EPSS 57.5% 9.1 CriticalFebruary 11, 2022
• apache cassandra Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• apache cassandra, netapp oncommand insight +1 more Man-in-the-middle attack in Apache Cassandra CVE-2020-13946 Fix available 5.9 MediumSeptember 1, 2020
• apache cassandra Missing Authentication for Critical Function in Apache Cassandra CVE-2018-8016 Fix available 9.8 CriticalJune 28, 2018