hashicorp

Top products

The 15 most recently published vulnerabilities affecting hashicorp.

• CVE-2026-19113Unauthenticated denial of service via unbounded request body processing5.3Aug 7, 2026
• CVE-2026-15972Unauthenticated denial of service via unbounded external gRPC connection acceptance7.5Aug 7, 2026
• CVE-2026-15970L7 intention authorization bypass via custom public listener4.2Aug 7, 2026
• CVE-2026-19017Consul vulnerable to partial arbitrary file read via Vault Connect CA provider6.8Aug 7, 2026
• CVE-2026-19015Uncontrolled resource consumption in the Consul Connect CA roots endpoint5.3Aug 7, 2026
• CVE-2026-19014Uncontrolled resource consumption in the Consul Connect authorization endpoint4.3Aug 7, 2026
• CVE-2026-19012Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path5.3Aug 7, 2026
• CVE-2026-19016Authorization bypass for session deletion in the transaction API4.2Aug 7, 2026
• CVE-2026-16326consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0Jul 29, 2026
• CVE-2026-16328consul-mcp-server vulnerable to server side request forgery leading to token exposure8.6Jul 29, 2026
• CVE-2026-16498terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0Jul 28, 2026
• CVE-2026-16496terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user8.9Jul 28, 2026
• CVE-2026-14869terraform-mcp-server vulnerable to server side request forgery leading to token exposure8.6Jul 28, 2026
• CVE-2026-14896Nomad vulnerable to cross-namespace host volume claim deletion4.2Jul 8, 2026
• CVE-2026-14361Consul-template is vulnerable to path redirection in writeToFile through symlink attack4.7Jul 8, 2026