PT-2026-30916 · Apache · Apache Cassandra

Youlong Chen · Published 2026-04-06 · Updated 2026-05-18 · CVE-2026-32588

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 4.0 through 4.0.19, 4.1 through 4.1.10, and 5.0 through 5.0.6

Description An authenticated user can cause increased query latencies through repeated password changes in Apache Cassandra. This issue affects versions 4.0, 4.1, and 5.0.

Recommendations Upgrade to version 4.0.20 Upgrade to version 4.1.11 Upgrade to version 5.0.7

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2026-04927

CLEANSTART-2026-DD05788

CLEANSTART-2026-RN56220

CVE-2026-32588

GHSA-QFFM-GF3J-6MVG

Affected Products

Apache Cassandra

References · 236

• https://nvd.nist.gov/vuln/detail/CVE-2023-34454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42583 · Security Note
• https://osv.dev/vulnerability/GHSA-qffm-gf3j-6mvg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24970 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-12801 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6763 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-34455 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-55163 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-46120 · Security Note