223 matches found
GHSA-3G8R-4PFX-JMFH vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
CVE-2026-59920 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
CVE-2026-59920 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-3G8R-4PFX-JMFH vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-5XRH-QMMQ-W6CH vulnerabilities
Vulnerabilities for packages: pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, trino, apache-hop-fips, thingsboard, apache-hop, tez, celeborn, pinot-fips, seata...
CVE-2026-46340 vulnerabilities
Vulnerabilities for packages: pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, trino, apache-hop-fips, thingsboard, apache-hop, tez, celeborn, pinot-fips, seata...
CLEANSTART-2026-CP46043 Security fixes for CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42586, CVE-2026-42587, CVE-2026-44248, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-38f8-5428-x5cv, ghsa-3p8m-j85q-pgmj, ghsa-45q3-82m4-75jr, ghsa-4g8c-wm8x-jfhw, ghsa-57rv-r2g8-2cj3, ghsa-5jpm-x58v-624v, ghsa-84h7-rjj3-6jx4, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-fghv-69vj-qj49, ghsa-jfg9-48mv-9qgx, ghsa-jq43-27x9-3v86, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-rgrr-p7gp-5xj7, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv, ghsa-xxqh-mfjm-7mv9 applied in versions: 0.1.109-r0, 0.1.113-r1, 0.1.118-r2
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MX76059 Security fixes for CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42586, CVE-2026-42587, CVE-2026-44248, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-38f8-5428-x5cv, ghsa-3p8m-j85q-pgmj, ghsa-45q3-82m4-75jr, ghsa-4g8c-wm8x-jfhw, ghsa-57rv-r2g8-2cj3, ghsa-5jpm-x58v-624v, ghsa-84h7-rjj3-6jx4, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-fghv-69vj-qj49, ghsa-jfg9-48mv-9qgx, ghsa-jq43-27x9-3v86, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-rgrr-p7gp-5xj7, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv, ghsa-xxqh-mfjm-7mv9 applied in versions: 0.1.109-r0, 0.1.113-r1, 0.1.118-r2
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-27314
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are...
CVE-2026-33109
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
EUVD-2026-28451
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
EUVD-2026-28448
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33844
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844
Azure Managed Instance for Apache Cassandra is affected by a vulnerability described as improper input validation that enables an authorized attacker to perform remote code execution over the network. The CVSS v3.1 base score is 9.0 (CRITICAL) with network attack, low complexity, required privile...
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33109
CVE-2026-33109 affects Azure Managed Instance for Apache Cassandra. The vulnerability is described as improper access control that allows an authenticated, network-adjacent attacker to execute code on the instance. The CVSS 3.1 base score is 9.9 (CRITICAL) with NETWORK attack vector, LOW attack c...