bank-vaults
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| vault-secrets-webhook | 1 | – | Jul 31, 2026 |
Exploited and recent CVEs
- CVE-2026-54725 vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API 0.4%