VYPR
Get started
← All advisories
Medium severity6.5NVD Advisory· Published Apr 7, 2026· Updated Apr 15, 2026

CVE-2026-32588

CVE-2026-32588

Description

Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.cassandra:cassandra-allMaven
>= 4.0, < 4.0.204.0.20
org.apache.cassandra:cassandra-allMaven
>= 4.1, < 4.1.114.1.11
org.apache.cassandra:cassandra-allMaven
>= 5.0, < 5.0.75.0.7

Affected products

1
  • Apache/Cassandra
    cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
    Range: >=4.0.0,<4.0.20

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

6