CE
Product
Consul Enterprise
27
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 9Medium 18Low 0
Watch
Add Consul Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105608 New | 8.8 | Oct 26 | Consul vulnerable to an authorization bypass in service mesh registration Affected: 2.0.4 before 2.1.0 |
| CVE-2026-87090 | 8.3 | Sep 10 | Consul vulnerable to an authorization bypass in the catalog node-write path Affected: 0.1.0 before 2.0.4 |
| CVE-2026-105626 New | 7.5 | Oct 26 | Consul vulnerable to a denial of service in HTTP APIs Affected: 0.6.0 before 2.1.0 |
| CVE-2026-105765 New | 7.5 | Oct 26 | Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API Affected: 1.17.0 before 2.1.0 |
| CVE-2026-15972 | 7.5 | Aug 7 | Unauthenticated denial of service via unbounded external gRPC connection acceptance Affected: 1.13.0 before 2.0.3 |
| CVE-2023-1297 | 7.5 | Jun 2 | Consul Cluster Peering can Result in Denial of Service Affected: 1.14.0 through 1.14.5; 1.15.0 through 1.15.3 |
| CVE-2022-3920 | 7.5 | Nov 15 | Consul Peering Imported Nodes/Services Leak Affected: 1.13.0; 1.13.1; 1.13.2; 1.13.3 |
| CVE-2023-3518 | 7.3 | Aug 9 | JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access Affected: 1.16.0 |
| CVE-2026-88021 | 7.1 | Sep 10 | Consul vulnerable to an authorization bypass in the Connect service mesh Affected: 1.9.0 before 2.0.4 |
Showing 9