CVE-2026-65770

CriticalCVSS 10.0

Published: 20/08/2026(UTC)Updated: 25/08/2026(UTC)Translated: 21/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.58%

45th percentile - higher than 45% of all known CVEs

Summary

Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.

Risk Assessment

Risk of remote code execution and full compromise of the Cassandra instance.

Recommendation

Install security updates from Microsoft and restrict network access to Cassandra instances.

Other vulnerabilities in Azure Managed Instance for Apache Cassandra

CVE-2026-33109Critical
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Original NVD description (English source)

Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS