Vulnerability intelligence

CVE-2026-33109

Microsoft Azure Managed Instance for Apache Cassandra CWE-284

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

CVSS Score

9.9

Critical

EPSS — Exploit Probability

0.7%

Riskier than 51% of all CVEs · checked 2026-09-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered May 12, 2026 · latest May 13, 2026

Coverage timeline