PT-2026-30916 · Apache · Apache Cassandra

Youlong Chen · CVE-2026-32588 · Published 2026-04-06 · Updated 2026-05-18

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 4.0 through 4.0.19, 4.1 through 4.1.10, and 5.0 through 5.0.6

Description An authenticated user can cause increased query latencies through repeated password changes in Apache Cassandra. This issue affects versions 4.0, 4.1, and 5.0.

Recommendations Upgrade to version 4.0.20 Upgrade to version 4.1.11 Upgrade to version 5.0.7

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2026-04927

CLEANSTART-2026-DD05788

CLEANSTART-2026-RN56220

CVE-2026-32588

GHSA-QFFM-GF3J-6MVG

Affected Products

Apache Cassandra

References · 238

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32588.json · Exploit
• https://osv.dev/vulnerability/GHSA-qffm-gf3j-6mvg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59419 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23015 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-48924 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53864 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21452 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42587 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42779 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41881 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-11143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41417 · Security Note