Login Request a demo
CA
Product
Cassandra
by Apache · last CVE Apr 7, 2026
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 3High 6Medium 6Low 0
Severity
All severities16Critical3High6Medium6Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Cassandra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32588
6.5
1%
Apr 7
Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing
Affected: 4.0.0 before 4.0.20; 4.1.0 before 4.1.11; 5.0.0 before 5.0.7
CVE-2020-13946
5.9
3%
Sep 1
In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or…
Affected: before 2.1.22; 2.2.0 before 2.2.18; 3.0.0 before 3.0.22; 3.11.0 before 3.11.8; 4.0.0; 4.0.0; +3 more
CVE-2019-2684
5.9
38%
Apr 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 2.1.0 before 2.1.22; 2.2.0 before 2.2.18; 3.0.0 before 3.0.22; 3.11.0 before 3.11.8; 4.0.0
CVE-2026-27315
5.5
0%
Apr 7
Apache Cassandra: cqlsh history sensitive information leak
Affected: 4.0.0 before 4.0.20
CVE-2025-24860
5.4
1%
Feb 4
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer…
Affected: 4.0.0 before 4.0.16; 4.1.0 before 4.1.8; 5.0.0 before 5.0.3
CVE-2024-27137
5.3
0%
Feb 4
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a…
Affected: 4.0.2 before 4.0.15; 4.1.0 before 4.1.8; after 5.0.0 before 5.0.3; 5.0.0; 5.0.0; 5.0.0; +1 more
Showing 6