Apache Software Foundation Apache Cassandra

• CVE-2026-32588 Medium 6.5 Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing 0.6%
• CVE-2026-27315 Medium 5.5 Apache Cassandra: cqlsh history sensitive information leak 0.2%
• CVE-2026-27314 High 8.8 Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass 0.3%
• CVE-2025-26467 High 8.8 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) 0.5%
• CVE-2024-27137 Medium 5.3 Apache Cassandra: unrestricted deserialization of JMX authentication credentials 0.3%
• CVE-2025-24860 Medium 5.4 Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions 1.1%
• CVE-2025-23015 High 8.8 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions 1.0%
• CVE-2023-30601 High 7.8 Apache Cassandra: Privilege escalation when enabling FQL/Audit logs 0.3%
• CVE-2021-44521 Unrated Remote code execution for scripted UDFs 58.9%