Hashicorp Consul vulnerabilities

• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in health check registration CVE-2026-115804 6.4 MediumOctober 26, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to a denial of service in HTTP APIs CVE-2026-105626 7.5 HighOctober 26, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in service mesh registration CVE-2026-105608 8.8 HighOctober 26, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API CVE-2026-105765 7.5 HighOctober 26, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in the Connect service mesh CVE-2026-88021 Fix available 7.5 HighSeptember 10, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in the catalog deregistration path CVE-2026-87107 Fix available 5.4 MediumSeptember 10, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to a denial of service in the native RPC listener CVE-2026-87106 Fix available 6.5 MediumSeptember 10, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to an authorization bypass in the catalog node-write path CVE-2026-87090 Fix available 8.3 HighSeptember 10, 2026
• hashicorp consul, consul enterprise +1 more Unauthenticated denial of service via unbounded request body processing CVE-2026-19113 Fix available 5.3 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Unauthenticated denial of service via unbounded external gRPC connection acceptance CVE-2026-15972 Fix available 7.5 HighAugust 7, 2026
• hashicorp consul, consul enterprise +1 more L7 intention authorization bypass via custom public listener CVE-2026-15970 Fix available 4.2 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to partial arbitrary file read via Vault Connect CA provider CVE-2026-19017 Fix available 6.8 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Uncontrolled resource consumption in the Consul Connect CA roots endpoint CVE-2026-19015 Fix available 5.3 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Uncontrolled resource consumption in the Consul Connect authorization endpoint CVE-2026-19014 Fix available 4.3 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path CVE-2026-19012 Fix available 5.3 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Authorization bypass for session deletion in the transaction API CVE-2026-19016 Fix available 4.2 MediumAugust 7, 2026
• hashicorp consul, consul enterprise +1 more Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider CVE-2026-2808 Fix available 6.8 MediumMarch 11, 2026
• hashicorp consul, consul enterprise +1 more Consul's KV endpoint is vulnerable to denial of service CVE-2025-11374 Fix available 6.5 MediumOctober 28, 2025
• hashicorp consul, consul enterprise +1 more Consul's event endpoint is vulnerable to denial of service CVE-2025-11375 Fix available 6.5 MediumOctober 28, 2025
• hashicorp consul, consul enterprise +1 more Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation CVE-2024-10086 Fix available 6.1 MediumOctober 30, 2024
• hashicorp consul, consul enterprise +1 more Consul L7 Intentions Vulnerable To Headers Bypass CVE-2024-10006 Fix available 8.3 HighOctober 30, 2024
• hashicorp consul, consul enterprise +1 more Consul L7 Intentions Vulnerable To URL Path Bypass CVE-2024-10005 Public exploitFix available 8.1 HighOctober 30, 2024
• gitlab, hashicorp consul +1 more Dependency on Vulnerable Third-Party Component in GitLab CVE-2023-5332 Fix available 5.9 MediumDecember 4, 2023
• hashicorp consul, consul enterprise +1 more JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access CVE-2023-3518 Fix available 7.4 HighAugust 9, 2023
• hashicorp consul, consul enterprise +1 more Consul Cluster Peering can Result in Denial of Service CVE-2023-1297 Fix available 4.9 MediumJune 2, 2023
• hashicorp consul, consul enterprise +1 more Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner CVE-2023-2816 Fix available 8.7 HighJune 2, 2023
• hashicorp consul, consul enterprise +1 more Consul Server Panic when Ingress and API Gateways Configured with Peering CVE-2023-0845 Fix available 4.9 MediumMarch 9, 2023
• hashicorp consul, consul enterprise +1 more Consul Peering Imported Nodes/Services Leak CVE-2022-3920 Fix available 5.3 MediumNovember 15, 2022
• hashicorp consul HashiCorp Consul vulnerable to authorization bypass CVE-2022-40716 Fix available 6.5 MediumSeptember 23, 2022
• hashicorp consul HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions CVE-2021-41803 Fix available 7.1 HighSeptember 23, 2022
• hashicorp consul template HashiCorp Consul Template could reveal Vault secret contents in error messages CVE-2022-38149 Fix available 7.5 HighAugust 17, 2022
• hashicorp consul, fedoraproject fedora +1 more Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector CVE-2022-29153 Fix available 7.5 HighApril 19, 2022
• hashicorp consul HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers CVE-2022-24687 Fix available 6.5 MediumFebruary 24, 2022
• hashicorp consul HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has... CVE-2021-41805 Public exploitFix available EPSS 34.8% 8.8 HighDecember 12, 2021
• hashicorp consul HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. CVE-2021-38698 Fix available 6.5 MediumSeptember 7, 2021
• hashicorp consul HashiCorp Consul Privilege Escalation Vulnerability CVE-2021-37219 Fix available 8.8 HighSeptember 7, 2021
• hashicorp consul HashiCorp Consul L7 deny intention results in an allow action CVE-2021-36213 Fix available 7.5 HighJuly 17, 2021
• hashicorp consul Hashicorp Consul Missing SSL Certificate Validation CVE-2021-32574 Fix available 7.5 HighJuly 17, 2021
• hashicorp consul HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically... CVE-2021-28156 Fix available 7.5 HighApril 20, 2021
• hashicorp consul HashiCorp Consul Cross-site Scripting vulnerability CVE-2020-25864 Fix available 6.1 MediumApril 20, 2021
• golang protobuf, hashicorp consul +1 more Improper Input Validation in GoGo Protobuf CVE-2021-3121 Fix available 8.6 HighJanuary 11, 2021
• hashicorp consul docker image The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user.... CVE-2020-29564 9.8 CriticalDecember 8, 2020
• hashicorp consul Privilege Escalation in HashiCorp Consul CVE-2020-28053 Fix available 6.5 MediumNovember 23, 2020
• hashicorp consul Denial of service in HashiCorp Consul CVE-2020-25201 Fix available 7.5 HighNovember 4, 2020
• hashicorp consul Improper Input Validation in HashiCorp Consul CVE-2020-13170 Fix available 7.5 HighJune 11, 2020
• hashicorp consul Incorrect Permission Assignment for Critical Resource in Hashicorp Consul CVE-2020-12797 Fix available 5.3 MediumJune 11, 2020
• hashicorp consul Denial of Service (DoS) in HashiCorp Consul CVE-2020-12758 Fix available 7.5 HighJune 11, 2020
• hashicorp consul Allocation of Resources Without Limits or Throttling in Hashicorp Consul CVE-2020-13250 Fix available 7.5 HighJune 11, 2020
• hashicorp consul Denial of Service (DoS) in HashiCorp Consul CVE-2020-7219 Fix available 7.5 HighJanuary 31, 2020
• hashicorp consul Incorrect Authorization in HashiCorp Consul CVE-2020-7955 Fix available 5.3 MediumJanuary 31, 2020
• Show olderLoading…