Login Request a demo
AC
Product
Apache Cassandra
by Apache Software Foundation · last CVE Apr 7, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Cassandra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27314
8.8
0%
Apr 7
Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass
Affected: 5.0 through 5.0.6
CVE-2025-26467
8.8
1%
Aug 25
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
Affected: 4.0.16
CVE-2025-23015
8.8
1%
Feb 4
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Affected: 3.0.0 through 3.0.30; 3.1.0 through 3.11.17; 4.0.0 through 4.0.15; 4.1.0 through 4.1.7; 5.0.0 through 5.0.2
CVE-2023-30601
7.8
0%
May 30
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Affected: 4.0.0 through 4.0.9; 4.1.0 through 4.1.1
Showing 4