AC
Product
Apache Cassandra
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Apache Cassandra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32588 | 6.5 | Apr 7 | Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing Affected: 4.0 through 4.0.19; 4.1 through 4.1.10; 5.0 through 5.0.6 |
| CVE-2026-27315 | 5.5 | Apr 7 | Apache Cassandra: cqlsh history sensitive information leak Affected: 4.0 through 4.0.19 |
| CVE-2025-24860 | 5.4 | Feb 4 | Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions Affected: 4.0.0 through 4.0.15; 4.1.0 through 4.1.7; 5.0.0 through 5.0.2 |
| CVE-2024-27137 | 5.3 | Feb 4 | Apache Cassandra: unrestricted deserialization of JMX authentication credentials Affected: 4.0.2 before 4.0.15; 4.1.0 before 4.1.8; 5.0-beta1 before 5.0.3 |
Showing 4