https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:52:08.979115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-cassandra-2026-47846 BIT-cassandra-2026-47846 — Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized 2026-10-06T00:52:08.981875+00:00

Affected: Bitnami: cassandra

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassandra account in certain scenarios. This leaves the default cassandra:cassandra superuser active as an unintended access path. Any remote attacker who knows the default Cassandra credentials, can authenticate to the cluster as a full superuser regardless of the operator's configuration, bypassing the intent to replace the built-in account.

 https://cve.radiocsirt.org/vuln/euvd-2026-328617 EUVD-2026-328617 2026-10-06T00:52:08.981955+00:00 EUVD-2026-328617 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47846 fkie_cve-2026-47846 2026-10-06T00:52:08.981978+00:00

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassandra account in certain scenarios. This leaves the default cassandra:cassandra superuser active as an unintended access path.

Affected versions — Container image: 4.0.x prior to 4.0.20-photon-5-r7; 4.1.x prior to 4.1.11-photon-5-r7; 5.0.x prior to 5.0.8-photon-5-r4 / 5.0.8-debian-12-r3.