https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:17:21.154379+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01159 bdu:2025-01159 2026-10-04T06:17:21.161088+00:00 bdu:2025-01159 https://cve.radiocsirt.org/vuln/bit-cassandra-2025-24860 BIT-cassandra-2025-24860 — Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different n… 2026-10-04T06:17:21.161123+00:00

Affected: Bitnami: cassandra

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer.

Users with restricted data center access can update their own permissions via data control language (DCL) statements on affected versions.

This issue affects Apache Cassandra: from 4.0.0 through 4.0.15 and from 4.1.0 through 4.1.7 for CassandraNetworkAuthorizer, and from 5.0.0 through 5.0.2 for both CassandraNetworkAuthorizer and CassandraCIDRAuthorizer.

Operators using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer on affected versions should review data access rules for potential breaches. Users are recommended to upgrade to versions 4.0.16, 4.1.8, 5.0.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cleanstart-2026-dd05788 Withdrawn: CLEANSTART-2026-DD05788 — Security fixes for CVE-2018-10237, CVE-2020-8908, CVE-2021-41973, CVE-2022-24823, CVE-2022-3171, CVE-2022-3509, CVE-202… 2026-10-04T06:17:21.161165+00:00

Withdrawn by the publisher.

Affected: CleanStart: stargate

Multiple security vulnerabilities affect the stargate package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2025-03538 cnvd-2025-03538 2026-10-04T06:17:21.161196+00:00 cnvd-2025-03538 https://cve.radiocsirt.org/vuln/euvd-2026-217791 EUVD-2026-217791 2026-10-04T06:17:21.161209+00:00 EUVD-2026-217791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24860 fkie_cve-2025-24860 2026-10-04T06:17:21.161219+00:00

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer.

Users with restricted data center access can update their own permissions via data control language (DCL) statements on affected versions.

This issue affects Apache Cassandra: from 4.0.0 through 4.0.15 and from 4.1.0 through 4.1.7 for CassandraNetworkAuthorizer, and from 5.0.0 through 5.0.2 for both CassandraNetworkAuthorizer and CassandraCIDRAuthorizer.

Operators using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer on affected versions should review data access rules for potential breaches. Users are recommended to upgrade to versions 4.0.16, 4.1.8, 5.0.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3cjf-fwcq-xh22 GHSA-3cjf-fwcq-xh22 — Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different n… 2026-10-04T06:17:21.161245+00:00

Affected: Maven: org.apache.cassandra:cassandra-all

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer.

Users with restricted data center access can update their own permissions via data control language (DCL) statements on affected versions.

This issue affects Apache Cassandra: from 4.0.0 through 4.0.15 and from 4.1.0 through 4.1.7 for CassandraNetworkAuthorizer, and from 5.0.0 through 5.0.2 for both CassandraNetworkAuthorizer and CassandraCIDRAuthorizer.

Operators using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer on affected versions should review data access rules for potential breaches. Users are recommended to upgrade to versions 4.0.16, 4.1.8, 5.0.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0258 WID-SEC-W-2025-0258 — Apache Cassandra: Mehrere Schwachstellen. 2026-10-04T06:17:21.161271+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um Informationen offenzulegen, oder seine Rechte zu erhöhen.