DeutschShown in its original language — a full translation is planned for a future version.
Apache Cassandra: Mehrere Schwachstellen
view advisory published 2026-04-07
Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-32588US | — | — | ||
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to v… | ||||
| CVE-2026-27315US | — | — | ||
Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via ~/.cassandra/cqlsh_h… | ||||
| CVE-2026-27314US | — | — | ||
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identi… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-fh34-c629-p8xj vom 2026-04-07external
- GitHub Security Advisory GHSA-qffm-gf3j-6mvg vom 2026-04-07external
- GitHub Security Advisory GHSA-qxpc-96fq-wwmg vom 2026-04-07external
- Mailing List OSS Security - CVE-2026-27314 vom 2026-04-07external
- Mailing List OSS Security - CVE-2026-27315 vom 2026-04-07external
- Mailing List OSS Security - CVE-2026-32588 vom 2026-04-07external
- WID-SEC-W-2026-1009 - CSAF Versionself
- WID-SEC-2026-1009 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan