PT-2026-38580 · Microsoft · Azure Managed Instance For Apache Cassandra

Wtm_Offensi · Published 2026-05-07 · Updated 2026-05-20 · CVE-2026-33844

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra (affected versions not specified)

Description Improper input validation allows an authorized attacker to execute code over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-06844

CVE-2026-33844

Affected Products

Azure Managed Instance For Apache Cassandra

References · 9

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33844 · Security Note
• https://bdu.fstec.ru/vul/2026-06844 · Security Note
• https://t.me/CVEtracker/53030 · Telegram Post
• https://twitter.com/CVEnew/status/2053559198844141773 · Twitter Post
• https://twitter.com/integ_sec/status/2057072613013221467 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054065384068694505 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054065383233962309 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054065384966267084 · Twitter Post