Latest vulnerabilities for vendor "hashicorp"

HashiCorp Vault EnterpriseVault Enterprise vulnerable to cross-namespace entity deletion

Risk 60

Severity

8.2

First published (updated )

CVE-2026-14886

HashiCorp VaultVault vulnerable to LIST authorization bypass via trailing-slash strip

Risk 22

Severity

4.3

First published (updated )

CVE-2026-12624

HashiCorp Consul Community EditionUnauthenticated denial of service via unbounded request body processing

Risk 27

Severity

5.3

First published (updated )

CVE-2026-19113

HashiCorp Consul EnterpriseL7 intention authorization bypass via custom public listener

Risk 29

Severity

4.2

First published (updated )

CVE-2026-15970

HashiCorp Consul EnterpriseUncontrolled resource consumption in the Consul Connect CA roots endpoint

Risk 27

Severity

5.3

First published (updated )

CVE-2026-19015

HashiCorp Consul Community EditionUncontrolled resource consumption in the Consul Connect authorization endpoint

Risk 22

Severity

4.3

First published (updated )

CVE-2026-19014

HashiCorp Consul EnterpriseAuthenticated denial of service in Consul Enterprise-to-Community Edition downgrade path

Risk 32

Severity

5.3

First published (updated )

CVE-2026-19012

HashiCorp Consul Community EditionAuthorization bypass for session deletion in the transaction API

Risk 29

Severity

4.2

First published (updated )

CVE-2026-19016

HashiCorp NomadNomad vulnerable to cross-namespace host volume claim deletion

Risk 29

Severity

4.2

First published (updated )

CVE-2026-14896

HashiCorp consul-templateConsul-template is vulnerable to path redirection in writeToFile through symlink attack

Risk 28

Severity

4.7

First published (updated )

CVE-2026-14361

HashiCorp NomadNomad vulnerable to sandbox escape in Docker task driver

Risk 59

Severity

8.7

First published (updated )

CVE-2026-14891

HashiCorp NomadNomad Docker driver Linux host namespace bypass

Risk 44

Severity

7.7

First published (updated )

CVE-2026-14373

HashiCorp memberlistDenial of service via crafted push/pull gossip message in memberlist

Risk 30

Severity

4.9

First published (updated )

CVE-2026-14362

HashiCorp Terraform EnterprisePath traversal allows arbitrary file read in Terraform Enterprise container

Risk 44

Severity

7.7

First published (updated )

CVE-2026-14468

HashiCorp VaultAudit Log Plugin Directory Guard Bypass via Legacy path Option

Risk 26

Severity

4.4

First published (updated )

CVE-2026-5051

HashiCorp Consul 2.0End of life details

First published (updated )

EOL-consul-2.0

Accurics TerrascanSSRF

Risk 49

Severity

9.2

First published (updated )

CVE-2026-47357

HashiCorp NomadNomad vulnerable to path traversal in dynamic host volume which may lead to code execution

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-7474

HashiCorp Nomad exec2 task driverNomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

Risk 24

Severity

6

EPSS

0.03%

First published (updated )

CVE-2026-8052

HashiCorp NomadNomad vulnerable to arbitrary file read/write on client host through symlink attack

Risk 24

Severity

6

EPSS

0.01%

First published (updated )

CVE-2026-6959

HashiCorp consul-templateConsul-template vulnerable to sandbox path bypass in file helper via a symlink attack

Risk 28

Severity

4.7

First published (updated )

CVE-2026-5061

HashiCorp BoundaryBoundary Workers Vulnerable to Denial of Service During TLS Handshake

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-7776

HashiCorp Terraform 1.15End of life details

First published (updated )

EOL-terraform-1.15

HashiCorp Nomad 2.0End of life details

First published (updated )

EOL-nomad-2.0

HashiCorp Vault Community EditionVault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedl…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459109

HashiCorp VaultIf a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorizati…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459107

HashiCorp Vault Community EditionAn authenticated user with access to a kvv2 path through a policy containing a glob may be able to d…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459105

HashiCorp VaultVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2026-5807

HashiCorp VaultVault Token Leaked to Backends via Authorization: Bearer Passthrough Header

Risk 79

Severity

8.8

First published (updated )

CVE-2026-4525

HashiCorp VaultVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

Risk 34

Severity

8.6

EPSS

0.01%

First published (updated )

CVE-2026-5052

Trending

Vendor Risk Score

Software

HashiCorp Vault EnterpriseVault Enterprise vulnerable to cross-namespace entity deletion

HashiCorp VaultVault vulnerable to LIST authorization bypass via trailing-slash strip

HashiCorp Consul Community EditionUnauthenticated denial of service via unbounded request body processing

HashiCorp Consul EnterpriseL7 intention authorization bypass via custom public listener

HashiCorp Consul EnterpriseUncontrolled resource consumption in the Consul Connect CA roots endpoint

Don't miss critical vulnerabilities

HashiCorp Consul Community EditionUncontrolled resource consumption in the Consul Connect authorization endpoint

HashiCorp Consul EnterpriseAuthenticated denial of service in Consul Enterprise-to-Community Edition downgrade path

HashiCorp Consul Community EditionAuthorization bypass for session deletion in the transaction API

HashiCorp NomadNomad vulnerable to cross-namespace host volume claim deletion

HashiCorp consul-templateConsul-template is vulnerable to path redirection in writeToFile through symlink attack

Don't miss critical vulnerabilities

HashiCorp NomadNomad vulnerable to sandbox escape in Docker task driver

HashiCorp NomadNomad Docker driver Linux host namespace bypass

HashiCorp memberlistDenial of service via crafted push/pull gossip message in memberlist

HashiCorp Terraform EnterprisePath traversal allows arbitrary file read in Terraform Enterprise container

HashiCorp VaultAudit Log Plugin Directory Guard Bypass via Legacy path Option

Don't miss critical vulnerabilities

HashiCorp Consul 2.0End of life details

Accurics TerrascanSSRF

HashiCorp NomadNomad vulnerable to path traversal in dynamic host volume which may lead to code execution

HashiCorp Nomad exec2 task driverNomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

HashiCorp NomadNomad vulnerable to arbitrary file read/write on client host through symlink attack

Don't miss critical vulnerabilities

HashiCorp consul-templateConsul-template vulnerable to sandbox path bypass in file helper via a symlink attack

HashiCorp BoundaryBoundary Workers Vulnerable to Denial of Service During TLS Handshake

HashiCorp Terraform 1.15End of life details

HashiCorp Nomad 2.0End of life details

HashiCorp Vault Community EditionVault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedl…

Don't miss critical vulnerabilities

HashiCorp VaultIf a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorizati…

HashiCorp Vault Community EditionAn authenticated user with access to a kvv2 path through a policy containing a glob may be able to d…

HashiCorp VaultVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

HashiCorp VaultVault Token Leaked to Backends via Authorization: Bearer Passthrough Header

HashiCorp VaultVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

Don't miss critical vulnerabilities

Company

Resources

Contact