CVE Catalog
CVE-2026-65770
CriticalCVSS 10.0Summary
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.
Risk Assessment
Risk of remote code execution and full compromise of the Cassandra instance.
Recommendation
Install security updates from Microsoft and restrict network access to Cassandra instances.
Original NVD description (English source)
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.