CyberRota
← Ana sayfaya dön

CVE-2026-47846

CRITICAL · CVSS 9.8 EPSS %0.34 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-18T20:16:13.630 · Çekilme zamanı: 2026-06-30T18:27:25.158580+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

GitHub PoC Linkleri

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-47846
Severity
CRITICAL
CVSS
9.8
EPSS
%0.34
Debian

Orijinal NVD Açıklaması

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassandra account in certain scenarios. This leaves the default cassandra:cassandra superuser active as an unintended access path. Affected versions — Container image: 4.0.x prior to 4.0.20-photon-5-r7; 4.1.x prior to 4.1.11-photon-5-r7; 5.0.x prior to 5.0.8-photon-5-r4 / 5.0.8-debian-12-r3.