Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:instaclustr_fork_of_stratio's_cassandra-lucene-index_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetapp (f19678f6-cb27-5a55-8852-34b249f80ef9)
ProductInstaclustr Fork Of Stratio'S Cassandra Lucene Index Plugin (0a3cf0cd-36c0-5df8-aa1b-2596c229c555)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26511 vulnerable 2026-06-08 07:12:52.521669 Cassandra-Lucene-Index allows bypass of Cassandra RBAC
HIGH (8.8)
Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow authenticated Cassandra users to remotely bypass RBAC and escalate their privileges.
Published: 2025-02-13T15:44:06.315Z
Updated: 2026-01-22T19:35:19.686Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.