Tooling

This hub aggregates every CVE we track for Tooling, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Tooling.

• CVE-2026-16326consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0Jul 29, 2026
• CVE-2026-16328consul-mcp-server vulnerable to server side request forgery leading to token exposure8.6Jul 29, 2026
• CVE-2026-16498terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0Jul 28, 2026
• CVE-2026-16496terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user8.9Jul 28, 2026
• CVE-2026-14869terraform-mcp-server vulnerable to server side request forgery leading to token exposure8.6Jul 28, 2026
• CVE-2026-14361Consul-template is vulnerable to path redirection in writeToFile through symlink attack4.7Jul 8, 2026
• CVE-2026-5061Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack4.7May 12, 2026
• CVE-2026-4660Go-getter may allow to arbitrary filesystem reads through git operations7.5Apr 9, 2026
• CVE-2025-13357Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method7.4Nov 21, 2025
• CVE-2025-1293HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass8.2Feb 20, 2025