https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:12:45.499449+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-cassandra-2023-30601 BIT-cassandra-2023-30601 — Apache Cassandra: Privilege escalation when enabling FQL/Audit logs 2026-10-03T18:12:45.693823+00:00

Affected: Bitnami: cassandra

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.

WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.

MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0791 certfr-2023-avi-0791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T18:12:45.693948+00:00 certfr-2023-avi-0791 https://cve.radiocsirt.org/vuln/euvd-2026-194569 EUVD-2026-194569 2026-10-03T18:12:45.694088+00:00 EUVD-2026-194569 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30601 fkie_cve-2023-30601 2026-10-03T18:12:45.694119+00:00

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.

WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.

MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

 https://cve.radiocsirt.org/vuln/ghsa-m9p2-j4hg-g373 GHSA-m9p2-j4hg-g373 — Apache Cassandra: Privilege escalation when enabling FQL/Audit logs 2026-10-03T18:12:45.694187+00:00

Affected: Maven: org.apache.cassandra:cassandra-all

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.

WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.

MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

 https://cve.radiocsirt.org/vuln/gsd-2023-30601 gsd-2023-30601 2026-10-03T18:12:45.694246+00:00 gsd-2023-30601 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1310 WID-SEC-W-2023-1310 — Apache Cassandra: Schwachstelle ermöglicht Privilegieneskalation 2026-10-03T18:12:45.694269+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Cassandra ausnutzen, um seine Privilegien zu erhöhen.