| CVE-2026-115804 |
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may…
|
6.4
Medium
|
Oct 26, 2026 |
| CVE-2026-105626 |
HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an…
|
7.5
High
|
Oct 26, 2026 |
| CVE-2026-105608 |
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration
|
8.8
High
|
Oct 26, 2026 |
| CVE-2026-105765 |
HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's…
|
7.5
High
|
Oct 26, 2026 |
| CVE-2026-88021 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a…
|
7.5
High
|
Sep 10, 2026 |
| CVE-2026-87107 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow…
|
5.4
Medium
|
Sep 10, 2026 |
| CVE-2026-87106 |
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an…
|
6.5
Medium
|
Sep 10, 2026 |
| CVE-2026-87090 |
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow…
|
8.3
High
|
Sep 10, 2026 |
| CVE-2026-19113 |
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of…
|
5.3
Medium
|
Aug 7, 2026 |
| CVE-2026-15972 |
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of…
|
7.5
High
|
Aug 7, 2026 |
| CVE-2026-15970 |
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization…
|
4.2
Medium
|
Aug 7, 2026 |
| CVE-2026-19017 |
Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read…
|
6.8
Medium
|
Aug 7, 2026 |
| CVE-2026-19015 |
Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource…
|
5.3
Medium
|
Aug 7, 2026 |
| CVE-2026-19014 |
Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource…
|
4.3
Medium
|
Aug 7, 2026 |
| CVE-2026-19012 |
Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service…
|
5.3
Medium
|
Aug 7, 2026 |
| CVE-2026-19016 |
Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission…
|
4.2
Medium
|
Aug 7, 2026 |
| CVE-2026-2808 |
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when…
|
6.8
Medium
|
Mar 11, 2026 |
| CVE-2025-11374 |
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect…
|
6.5
Medium
|
Oct 28, 2025 |
| CVE-2025-11375 |
Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum…
|
6.5
Medium
|
Oct 28, 2025 |
| CVE-2024-10086 |
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a…
|
6.1
Medium
|
Oct 30, 2024 |
| CVE-2024-10006 |
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic…
|
8.3
High
|
Oct 30, 2024 |
| CVE-2024-10005 |
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic…
|
8.1
High
|
Oct 30, 2024 |
| CVE-2023-3518 |
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access…
|
7.4
High
|
Aug 9, 2023 |
| CVE-2023-1297 |
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of…
|
4.9
Medium
|
Jun 2, 2023 |
| CVE-2023-2816 |
Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via…
|
8.7
High
|
Jun 2, 2023 |