| CVE-2026-110720 |
Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding…
|
9.9
Critical
|
Oct 26, 2026 |
| CVE-2026-87993 |
The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow…
|
7.7
High
|
Sep 10, 2026 |
| CVE-2026-8715 |
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in…
|
9.6
Critical
|
Aug 13, 2026 |
| CVE-2026-16326 |
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may…
|
10.0
Critical
|
Jul 29, 2026 |
| CVE-2026-16328 |
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied,…
|
8.6
High
|
Jul 29, 2026 |
| CVE-2026-16498 |
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the…
|
10.0
Critical
|
Jul 28, 2026 |
| CVE-2026-16496 |
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful…
|
8.9
High
|
Jul 28, 2026 |
| CVE-2026-14869 |
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the…
|
8.6
High
|
Jul 28, 2026 |
| CVE-2026-14361 |
The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile…
|
4.7
Medium
|
Jul 8, 2026 |
| CVE-2026-5061 |
The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper…
|
4.7
Medium
|
May 12, 2026 |
| CVE-2026-4660 |
HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git…
|
7.5
High
|
Apr 9, 2026 |
| CVE-2025-13357 |
Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by…
|
7.4
High
|
Nov 21, 2025 |
| CVE-2025-1293 |
Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode,…
|
8.2
High
|
Feb 20, 2025 |