Skip to contentHashicorp Consul Enterprise vulnerabilities
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in health check registrationCVE-2026-1158046.4 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to a denial of service in HTTP APIsCVE-2026-1056267.5 High
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in service mesh registrationCVE-2026-1056088.8 High
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in the agent's service mesh leaf certificate APICVE-2026-1057657.5 High
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in the Connect service meshCVE-2026-88021Fix available7.5 High
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in the catalog deregistration pathCVE-2026-87107Fix available5.4 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to a denial of service in the native RPC listenerCVE-2026-87106Fix available6.5 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in the catalog node-write pathCVE-2026-87090Fix available8.3 High
- hashicorp consul, consul enterprise +1 moreUnauthenticated denial of service via unbounded request body processingCVE-2026-19113Fix available5.3 Medium
- hashicorp consul, consul enterprise +1 moreUnauthenticated denial of service via unbounded external gRPC connection acceptanceCVE-2026-15972Fix available7.5 High
- hashicorp consul, consul enterprise +1 moreL7 intention authorization bypass via custom public listenerCVE-2026-15970Fix available4.2 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to partial arbitrary file read via Vault Connect CA providerCVE-2026-19017Fix available6.8 Medium
- hashicorp consul, consul enterprise +1 moreUncontrolled resource consumption in the Consul Connect CA roots endpointCVE-2026-19015Fix available5.3 Medium
- hashicorp consul, consul enterprise +1 moreUncontrolled resource consumption in the Consul Connect authorization endpointCVE-2026-19014Fix available4.3 Medium
- hashicorp consul, consul enterprise +1 moreAuthenticated denial of service in Consul Enterprise-to-Community Edition downgrade pathCVE-2026-19012Fix available5.3 Medium
- hashicorp consul, consul enterprise +1 moreAuthorization bypass for session deletion in the transaction APICVE-2026-19016Fix available4.2 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to arbitrary file reads through the vault kubernetes authentication providerCVE-2026-2808Fix available6.8 Medium
- hashicorp consul, consul enterprise +1 moreConsul's KV endpoint is vulnerable to denial of serviceCVE-2025-11374Fix available6.5 Medium
- hashicorp consul, consul enterprise +1 moreConsul's event endpoint is vulnerable to denial of serviceCVE-2025-11375Fix available6.5 Medium
- hashicorp consul, consul enterprise +1 moreConsul Vulnerable To Reflected XSS On Content-Type Error ManipulationCVE-2024-10086Fix available6.1 Medium
- hashicorp consul, consul enterprise +1 moreConsul L7 Intentions Vulnerable To Headers BypassCVE-2024-10006Fix available8.3 High
- hashicorp consul, consul enterprise +1 moreConsul L7 Intentions Vulnerable To URL Path BypassCVE-2024-10005Public exploitFix available8.1 High
- hashicorp consul, consul enterprise +1 moreJWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for AccessCVE-2023-3518Fix available7.4 High
- hashicorp consul, consul enterprise +1 moreConsul Cluster Peering can Result in Denial of ServiceCVE-2023-1297Fix available4.9 Medium
- hashicorp consul, consul enterprise +1 moreConsul Envoy Extension Downsteam Proxy Configuration By Upstream Service OwnerCVE-2023-2816Fix available8.7 High
- hashicorp consul, consul enterprise +1 moreConsul Server Panic when Ingress and API Gateways Configured with PeeringCVE-2023-0845Fix available4.9 Medium
- hashicorp consul, consul enterprise +1 moreConsul Peering Imported Nodes/Services LeakCVE-2022-3920Fix available5.3 Medium