Vulnerability intelligence

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

CVSS Score

9.9

Critical

EPSS — Exploit Probability

0.1%

Riskier than 24% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered May 12, 2026 · latest May 13, 2026

Coverage timeline