CVE-2026-33109

CriticalCVSS 9.9

Published: 07/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.71%

53th percentile - higher than 53% of all known CVEs

Summary

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Risk Assessment

An attacker with appropriate permissions could exploit this vulnerability to execute code remotely, potentially leading to serious security breaches.

Recommendation

It is recommended to review and strengthen access controls in Azure Managed Instance for Apache Cassandra to minimize the risk of unauthorized access.

Other vulnerabilities in Azure Managed Instance for Apache Cassandra

CVE-2026-65770Critical
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.

Original NVD description (English source)

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS