HashiCorp Consul Enterprise

• CVE-2026-115804 Medium 6.4 Consul vulnerable to an authorization bypass in health check registration 0.3%
• CVE-2026-105626 High 7.5 Consul vulnerable to a denial of service in HTTP APIs 0.4%
• CVE-2026-105608 High 8.8 Consul vulnerable to an authorization bypass in service mesh registration 0.5%
• CVE-2026-105765 High 7.5 Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API 0.2%
• CVE-2026-88021 High 7.5 Consul vulnerable to an authorization bypass in the Connect service mesh 0.3%
• CVE-2026-87107 Medium 5.4 Consul vulnerable to an authorization bypass in the catalog deregistration path 0.3%
• CVE-2026-87106 Medium 6.5 Consul vulnerable to a denial of service in the native RPC listener 0.4%
• CVE-2026-87090 High 8.3 Consul vulnerable to an authorization bypass in the catalog node-write path 0.4%
• CVE-2026-19113 Medium 5.3 Unauthenticated denial of service via unbounded request body processing 0.4%
• CVE-2026-15972 High 7.5 Unauthenticated denial of service via unbounded external gRPC connection acceptance 0.5%
• CVE-2026-15970 Medium 4.2 L7 intention authorization bypass via custom public listener 0.2%
• CVE-2026-19017 Medium 6.8 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider 0.5%
• CVE-2026-19015 Medium 5.3 Uncontrolled resource consumption in the Consul Connect CA roots endpoint 0.4%
• CVE-2026-19014 Medium 4.3 Uncontrolled resource consumption in the Consul Connect authorization endpoint 0.4%
• CVE-2026-19012 Medium 5.3 Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path 0.3%
• CVE-2026-19016 Medium 4.2 Authorization bypass for session deletion in the transaction API 0.3%
• CVE-2026-2808 Medium 6.8 Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider 0.5%
• CVE-2025-11374 Medium 6.5 Consul's KV endpoint is vulnerable to denial of service 0.4%
• CVE-2025-11375 Medium 6.5 Consul's event endpoint is vulnerable to denial of service 0.4%
• CVE-2024-10086 Medium 6.1 Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation 0.4%
• CVE-2024-10006 High 8.3 Consul L7 Intentions Vulnerable To Headers Bypass 0.5%
• CVE-2024-10005 High 8.1 Consul L7 Intentions Vulnerable To URL Path Bypass 0.8%
• CVE-2023-3518 High 7.4 JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access 0.4%
• CVE-2023-1297 Medium 4.9 Consul Cluster Peering can Result in Denial of Service 0.8%
• CVE-2023-2816 High 8.7 Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner 0.6%
• CVE-2023-0845 Medium 4.9 Consul Server Panic when Ingress and API Gateways Configured with Peering 1.0%
• CVE-2022-3920 Medium 5.3 Consul Peering Imported Nodes/Services Leak 0.7%