HashiCorp

Products

Exploited and recent CVEs

• CVE-2026-13303 High 8.7 Boundary vulnerable to server-side request forgery in Vault credential store 0.2%
• CVE-2026-13303 High 8.7 Boundary vulnerable to server-side request forgery in Vault credential store 0.2%
• CVE-2026-119168 High 8.8 Nomad allocation data migration may allow host directory permission modification via symlink following 0.1%
• CVE-2026-119168 High 8.8 Nomad allocation data migration may allow host directory permission modification via symlink following 0.1%
• CVE-2026-107347 High 8.4 Nomad dispatch payload writes can escape the allocation directory through symlinks 0.1%
• CVE-2026-107347 High 8.4 Nomad dispatch payload writes can escape the allocation directory through symlinks 0.1%
• CVE-2026-102260 Medium 4.3 Nomad vulnerable to cross-namespace information disclosure in multiple endpoints 0.2%
• CVE-2026-102260 Medium 4.3 Nomad vulnerable to cross-namespace information disclosure in multiple endpoints 0.2%
• CVE-2026-110720 Critical 9.9 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules 0.4%
• CVE-2026-115804 Medium 6.4 Consul vulnerable to an authorization bypass in health check registration 0.3%
• CVE-2026-115804 Medium 6.4 Consul vulnerable to an authorization bypass in health check registration 0.3%
• CVE-2026-105626 High 7.5 Consul vulnerable to a denial of service in HTTP APIs 0.4%
• CVE-2026-105626 High 7.5 Consul vulnerable to a denial of service in HTTP APIs 0.4%
• CVE-2026-105608 High 8.8 Consul vulnerable to an authorization bypass in service mesh registration 0.5%
• CVE-2026-105608 High 8.8 Consul vulnerable to an authorization bypass in service mesh registration 0.5%
• CVE-2026-105765 High 7.5 Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API 0.2%
• CVE-2026-105765 High 7.5 Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API 0.2%
• CVE-2026-19585 Medium 5.3 Go-getter vulnerable to a path traversal in S3/GCS directory download handling 0.2%
• CVE-2026-89322 High 7.2 Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions 0.3%
• CVE-2026-89322 High 7.2 Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions 0.3%
• CVE-2026-105820 Medium 5.4 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution 0.2%
• CVE-2026-105816 High 8.0 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots 0.3%
• CVE-2026-105816 High 8.0 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots 0.3%
• CVE-2026-105818 Medium 5.9 Vault PKI ACME Issues Certificate With Unvalidated SANs <0.1%
• CVE-2026-105818 Medium 5.9 Vault PKI ACME Issues Certificate With Unvalidated SANs <0.1%
• CVE-2026-88922 Medium 6.7 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling 0.1%
• CVE-2026-87993 High 7.7 Consul-template vulnerable to an information disclosure issue in error handling 0.4%
• CVE-2026-88021 High 7.5 Consul vulnerable to an authorization bypass in the Connect service mesh 0.3%
• CVE-2026-88021 High 7.5 Consul vulnerable to an authorization bypass in the Connect service mesh 0.3%
• CVE-2026-87107 Medium 5.4 Consul vulnerable to an authorization bypass in the catalog deregistration path 0.3%