Login Request a demo
AC
Product
Apache Cassandra
by Apache Software Foundation · last CVE Apr 7, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Cassandra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27314
8.8
0%
Apr 7
Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass
Affected: 5.0 through 5.0.6
CVE-2025-26467
8.8
1%
Aug 25
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
Affected: 4.0.16
CVE-2025-23015
8.8
1%
Feb 4
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Affected: 3.0.0 through 3.0.30; 3.1.0 through 3.11.17; 4.0.0 through 4.0.15; 4.1.0 through 4.1.7; 5.0.0 through 5.0.2
CVE-2023-30601
7.8
0%
May 30
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Affected: 4.0.0 through 4.0.9; 4.1.0 through 4.1.1
CVE-2026-32588
6.5
1%
Apr 7
Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing
Affected: 4.0 through 4.0.19; 4.1 through 4.1.10; 5.0 through 5.0.6
CVE-2026-27315
5.5
0%
Apr 7
Apache Cassandra: cqlsh history sensitive information leak
Affected: 4.0 through 4.0.19
CVE-2025-24860
5.4
1%
Feb 4
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Affected: 4.0.0 through 4.0.15; 4.1.0 through 4.1.7; 5.0.0 through 5.0.2
CVE-2024-27137
5.3
0%
Feb 4
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Affected: 4.0.2 before 4.0.15; 4.1.0 before 4.1.8; 5.0-beta1 before 5.0.3
Showing 8