Search CVEs, research… / diras.sa
  • PATCH AVAILABLE

CVE-2026-65770: pre-auth remote code execution in Microsoft Azure Managed Instance for Apache Cassandra

An unauthenticated attacker can execute arbitrary code over the network against Azure Managed Instance for Apache Cassandra by exploiting an argument-injection flaw (CVE-2026-65770). The vulnerability is an improper neutralization of argument delimiters (CWE-88) that leads to command injection; vendor advisories do not list specific fixed versions in the provided data. An attacker needs only network access to the managed service endpoint and no valid credentials to exploit this issue.

Published Updated Source: CVE Program, NVD, FIRST EPSS, Vendor advisory

CVSS 3.1
10CRITICAL
EPSS
0.01053
CWE
CWE-88
KEV DUE DATE
Not listed
PATCH
Available

DIRAS TAKE

Urgent: this vulnerability permits unauthenticated remote code execution (CVSS 10.0) so reduce internet exposure immediately and prioritize applying the vendor's updates or mitigations when they are published.

What is CVE-2026-65770?

An unauthenticated attacker can execute arbitrary code over the network against Azure Managed Instance for Apache Cassandra by exploiting an argument-injection flaw (CVE-2026-65770). The vulnerability is an improper neutralization of argument delimiters (CWE-88) that leads to command injection; vendor advisories do not list specific fixed versions in the provided data. An attacker needs only network access to the managed service endpoint and no valid credentials to exploit this issue.

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Which versions of Microsoft Azure Managed Instance for Apache Cassandra are affected?

BRANCHAFFECTEDFIXED
Azure Managed Instance for Apache Cassandra-

Is CVE-2026-65770 being exploited?

There are no public reports of exploitation or public exploit code as of 2026-09-29.

How to fix CVE-2026-65770

  1. Apply vendor guidance and patches as soon as Microsoft publishes fixed releases for Azure Managed Instance for Apache Cassandra.
  2. Restrict network exposure of managed Cassandra endpoints to trusted networks and use network access controls and firewall rules.
  3. Monitor logs and alerts for suspicious command execution, unexpected processes, or configuration changes on managed instances.
  4. Follow Microsoft's mitigation and hardening recommendations for Azure managed services until a confirmed fix is available.

Frequently asked questions

Is CVE-2026-65770 being actively exploited?

There are no public reports of active exploitation of CVE-2026-65770 as of 2026-09-29.

Which Azure Managed Instance for Apache Cassandra versions are affected by CVE-2026-65770?

The available advisory data names Azure Managed Instance for Apache Cassandra as affected but does not specify particular versions or releases.

Is there a patch for CVE-2026-65770?

Microsoft indicates a patch is available in principle, but the provided facts do not list specific fixed version numbers; apply vendor updates and guidance when Microsoft publishes the exact fixes.

Does CVE-2026-65770 require authentication?

No; the vulnerability can be exploited without authentication against Azure Managed Instance for Apache Cassandra, requiring only network access to the service endpoint.

References