> CVE-2026-32588

« BACK_TO_HOME
PUBLISHED
2026-04-07 17:16
MODIFIED
2026-04-07 17:16
EPSS (Prob. Exploit)
0.55%
Top 53.5%
DATA SOURCES:
NVD 🔗 2026-04-07 RED HAT 🔗 2026-04-12 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-02

> DESCRIPTION

Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-400

> CWE DETAILED DESCRIPTIONS

CWE-400: Uncontrolled Resource Consumption - The product does not properly control the allocation and maintenance of a limited resource.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-qffm-gf3j-6mvg LOW

Apache Cassandra has an authenticated DoS over CQL

AFFECTED PACKAGES:
MAVEN / org.apache.cassandra:cassandra-all
>= 5.0, < 5.0.7
Fixed in: 5.0.7
MAVEN / org.apache.cassandra:cassandra-all
>= 4.1, < 4.1.11
Fixed in: 4.1.11
MAVEN / org.apache.cassandra:cassandra-all
>= 4.0, < 4.0.20
Fixed in: 4.0.20

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing

AFFECTED PACKAGES:
Unknown / Unknown
10 versions affected
ALIASES:
GHSA-qffm-gf3j-6mvg

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/04/2026 17:16
Source: NVD
📊 ENRICHISSEMENT 01/05/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-400: Uncontrolled Resource Consumption - The product does not properly control the allocation and maintenance of a limited resource.
📊 ENRICHISSEMENT 12/04/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 12/04/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 6 months ago

> REFERENCES

https://lists.apache.org/thread/2tnwjdnss378glxrsmnlzz3k53ftphrc
« BACK_TO_HOME