| CVE-2026-115804 |
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may…
|
6.4
Moyenne
|
26 oct. 2026 |
| CVE-2026-105626 |
HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an…
|
7.5
Élevée
|
26 oct. 2026 |
| CVE-2026-105608 |
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration
|
8.8
Élevée
|
26 oct. 2026 |
| CVE-2026-105765 |
HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's…
|
7.5
Élevée
|
26 oct. 2026 |
| CVE-2026-88021 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a…
|
7.5
Élevée
|
10 sept. 2026 |
| CVE-2026-87107 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow…
|
5.4
Moyenne
|
10 sept. 2026 |
| CVE-2026-87106 |
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an…
|
6.5
Moyenne
|
10 sept. 2026 |
| CVE-2026-87090 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow…
|
8.3
Élevée
|
10 sept. 2026 |
| CVE-2026-19113 |
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of…
|
5.3
Moyenne
|
7 août 2026 |
| CVE-2026-15972 |
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of…
|
7.5
Élevée
|
7 août 2026 |
| CVE-2026-15970 |
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization…
|
4.2
Moyenne
|
7 août 2026 |
| CVE-2026-19017 |
Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read…
|
6.8
Moyenne
|
7 août 2026 |
| CVE-2026-19015 |
Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource…
|
5.3
Moyenne
|
7 août 2026 |
| CVE-2026-19014 |
Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource…
|
4.3
Moyenne
|
7 août 2026 |
| CVE-2026-19012 |
Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service…
|
5.3
Moyenne
|
7 août 2026 |
| CVE-2026-19016 |
Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission…
|
4.2
Moyenne
|
7 août 2026 |
| CVE-2026-2808 |
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when…
|
6.8
Moyenne
|
11 mars 2026 |
| CVE-2025-11374 |
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect…
|
6.5
Moyenne
|
28 oct. 2025 |
| CVE-2025-11375 |
Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum…
|
6.5
Moyenne
|
28 oct. 2025 |
| CVE-2024-10086 |
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a…
|
6.1
Moyenne
|
30 oct. 2024 |
| CVE-2024-10006 |
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic…
|
8.3
Élevée
|
30 oct. 2024 |
| CVE-2024-10005 |
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic…
|
8.1
Élevée
|
30 oct. 2024 |
| CVE-2023-3518 |
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access…
|
7.4
Élevée
|
9 août 2023 |
| CVE-2023-1297 |
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of…
|
4.9
Moyenne
|
2 juin 2023 |
| CVE-2023-2816 |
Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via…
|
8.7
Élevée
|
2 juin 2023 |