9.9 CriticalCWE-284
CVE-2026-33109
Microsoft Azure Managed Instance for Apache Cassandra vulnerability
MicrosoftAzure Managed Instance for Apache Cassandra
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.8%probability of exploitation in the next 30 days
Higher than 55% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 12 May · 21:31 UTC | Dark Reading | Microsoft Patch May 2026 fixes 137 bugs, zero day free |
| Wed 13 May · 12:11 UTC | SOCRadar | May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days |
- May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-DaysSOCRadar · mentions it in passing
- Microsoft Patch May 2026 fixes 137 bugs, zero day freeDark Reading · first in our coverage · mentions it in passing