CVE-2026-33109: Microsoft Azure Managed Instance For Apache Cassandra

Critical severity, CVSS 9.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Affected products

• Microsoft Azure Managed Instance For Apache Cassandra: affected versions not specified

Published 2026-05-07. Last modified 2026-06-17.