Apache Cassandra vulnerabilities

• apache cassandra Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing CVE-2026-32588 Fix available 6.5 MediumApril 7, 2026
• apache cassandra Apache Cassandra: cqlsh history sensitive information leak CVE-2026-27315 Fix available 5.5 MediumApril 7, 2026
• apache cassandra Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass CVE-2026-27314 Fix available 8.8 HighApril 7, 2026
• apache cassandra Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) CVE-2025-26467 Fix available 8.8 HighAugust 25, 2025
• apache cassandra Apache Cassandra: unrestricted deserialization of JMX authentication credentials CVE-2024-27137 Fix available 5.3 MediumFebruary 4, 2025
• apache cassandra Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions CVE-2025-24860 Fix available 5.4 MediumFebruary 4, 2025
• apache cassandra Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions CVE-2025-23015 Fix available 8.8 HighFebruary 4, 2025
• apache cassandra Apache Cassandra: Privilege escalation when enabling FQL/Audit logs CVE-2023-30601 Fix available 7.8 HighMay 30, 2023
• apache cassandra Remote code execution for scripted UDFs CVE-2021-44521 Public exploitFix available EPSS 58.9% 9.1 CriticalFebruary 11, 2022
• apache cassandra Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• apache cassandra, netapp oncommand insight +1 more Man-in-the-middle attack in Apache Cassandra CVE-2020-13946 Fix available 5.9 MediumSeptember 1, 2020
• oracle corporation java, apache cassandra, tomcat +15 more +17 more Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).... CVE-2019-2684 Fix available EPSS 37.6% 5.9 MediumApril 23, 2019
• apache cassandra Missing Authentication for Critical Function in Apache Cassandra CVE-2018-8016 Fix available 9.8 CriticalJune 28, 2018
• netty, apache cassandra, redhat jboss data grid +1 more +3 more Loop with Unreachable Exit Condition in Netty CVE-2016-4970 Fix available EPSS 11.3% 7.5 HighApril 13, 2017
• oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... CVE-2016-3427 In KEVFix available EPSS 92.3% 9.8 CriticalApril 21, 2016
• apache cassandra Improper Neutralization of Special Elements used in a Command in Apache Cassandra CVE-2015-0225 Fix available 7.5 HighApril 3, 2015