CVE-2026-32588

N/A

Description

Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.

CVE Details

CVSS v3.1 ScoreN/A

Published4/7/2026

Last Modified4/7/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-400

References

https://lists.apache.org/thread/2tnwjdnss378glxrsmnlzz3k53ftphrc(security@apache.org)

http://www.openwall.com/lists/oss-security/2026/04/07/9(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.