Overview 6 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
6matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC16.7%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
6
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
6
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
16.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
5
83.3%
split by
peak 3 / year
20001
Not applicable1
Medium1
not blocked1
Working exploit published1
20010
20020
20030
20040
20050
20060
20070
20080
20090
20100
20110
20120
20130
20140
20150
20160
20170
20180
20190
20200
20210
20220
20230
20242
Not applicable2
Critical1
High1
not blocked2
No public exploit2
20250
20263
Not applicable3
Critical3
not blocked3
No public exploit3
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-65770 | Critical | 2026-08-20 | Not applicable | No public exploit | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33844 | Critical | 2026-05-07 | Not applicable | No public exploit | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. |
| CVE-2026-33109 | Critical | 2026-05-07 | Not applicable | No public exploit | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. |
| CVE-2024-38175 | Critical | 2024-08-20 | Not applicable | No public exploit | An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network. |
| CVE-2024-27284 | High | 2024-02-29 | Not applicable | No public exploit | cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0. |
| CVE-2000-0341 | Medium | 2000-05-01 | Not applicable | Working exploit published | ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. |