Medium
CVE-2026-27315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
Low
CVE-2026-32588
Apache Cassandra has an authenticated DoS over CQL
High
CVE-2026-27314
Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator
High
CVE-2025-26467
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
Medium
CVE-2024-27137
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Medium
CVE-2025-24860
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
High
CVE-2025-23015
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
High
CVE-2023-30601
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Critical
CVE-2018-8016
Missing Authentication for Critical Function in Apache Cassandra
Critical
CVE-2021-44521
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
High
CVE-2020-17516
Authentication Bypass in Apache Cassandra
Medium
CVE-2020-13946
Man-in-the-middle attack in Apache Cassandra
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.