https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-32588.htmlhttps://patchthecve.com/cve/CVE-2026-32588.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.https://patchthecve.com/cve/CVE-2026-27315.htmlhttps://patchthecve.com/cve/CVE-2026-27315.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.5: Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via  ~/.cassandra/cqlsh_history local file access. Users are recommended to upgrade to version 4.0.20, which fixes this issue. -- Description: https://patchthecve.com/cve/CVE-2026-27314.htmlhttps://patchthecve.com/cve/CVE-2026-27314.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.8: Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are recomm