grafeo

ACT Platform is now called grafeo! Grafeo is a versatile platform to create custom data models, collect and share knowledge. It is a flexible, well-rounded solution that can be used for any purpose. Developed as part of the ACT research project, it remains at the core of ACT and powers the ACT...

CVE-2021-44521

CVE-2021-44521 Automated PoC of CVE-2021-44521 Credits to original poc: https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ Requirements Cassandra-driver pip3 install cassandra-driver Usage python3 poc.py Note that you can't do more...

CLEANSTART-2026-JK34472 In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack ...

CVE-2024-27137 affects multiple packages. In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX...

CLEANSTART-2026-CA79621 Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra

CVE-2025-23015 affects multiple packages. Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. See references for individual vulnerability details...

CLEANSTART-2026-VY06816 In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack ...

Security vulnerability affects the nats-server package. In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to...

Automated deployment and scaling service Code Execution

The vulnerability of the automated deployment and scaling service for managed Apache Cassandra solutions lies in the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CLEANSTART-2026-MB73363 Security fix for GHSA-jq43-27x9-3v86 applied in: management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-jq43-27x9-3v86 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Malicious code in cdc-apache-cassandra (npm)

The package cdc-apache-cassandra was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2026-63619

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

CVE-2026-65770

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-65770

Azure Managed Instance for Apache Cassandra is affected by an argument injection vulnerability (improper neutralization of argument delimiters in a command) that allows an unauthorized attacker to execute code over a network without any privileges or user interaction. The CVSS 3.1 score is 10.0 (...

CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

PT-2026-79199

Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description Improper neutralization of argument delimiters in a command, known as argument injection, allows an unauthorized attacker to execute code over a network...

CVE-2026-65770: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: tez, thingsboard, management-api-for-apache-cassandra-5.0, celeborn, trino...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: tez, thingsboard, management-api-for-apache-cassandra-5.0, celeborn, trino...

CLEANSTART-2026-IF92269 Security fixes in management-api-for-apache-cassandra-5.0 0.1.113-r1

Package management-api-for-apache-cassandra-5.0 version 0.1.113-r1 fixes 2 vulnerabilities: ghsa-84h7-rjj3-6jx4, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-LO26114 Security fixes in management-api-for-apache-cassandra-5.0 0.1.112-r0

Package management-api-for-apache-cassandra-5.0 version 0.1.112-r0 fixes 1 vulnerabilities: ghsa-84h7-rjj3-6jx4...

CLEANSTART-2026-NP47613 Security fixes in management-api-for-apache-cassandra-5.0 0.1.108-r0

Package management-api-for-apache-cassandra-5.0 version 0.1.108-r0 fixes 8 vulnerabilities: ghsa-4g8c-wm8x-jfhw, ghsa-jq43-27x9-3v86, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj...