https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:16:10.007649+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281193 EUVD-2026-281193 2026-10-03T21:16:10.010832+00:00 EUVD-2026-281193 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27314 fkie_cve-2026-27314 2026-10-03T21:16:10.010863+00:00

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY.

Users are recommended to upgrade to version 5.0.7+, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-qxpc-96fq-wwmg GHSA-qxpc-96fq-wwmg — Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator 2026-10-03T21:16:10.010896+00:00

Affected: Maven: org.apache.cassandra:cassandra-all

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY.

Users are recommended to upgrade to version 5.0.7+, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1009 WID-SEC-W-2026-1009 — Apache Cassandra: Mehrere Schwachstellen 2026-10-03T21:16:10.010922+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.