Login Request a demo
TO
Product
Tooling
by HashiCorp · last CVE Oct 26, 2026
13
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 5High 6Medium 2Low 0
Severity
All severities13Critical5High6Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tooling to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16326
10.0
1%
Jul 29
consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
Affected: 0.1.0 before 0.1.4
CVE-2026-16498
10.0
0%
Jul 28
terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
Affected: 0.3.0 before 1.1.0
CVE-2026-110720
New
9.9
0%
Oct 26
Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
Affected: 0.42.0 before 2.0.4
CVE-2025-13357
9.8
1%
Nov 21
Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method
Affected: 4.2.0 before 5.5.0
CVE-2026-8715
9.6
0%
Aug 13
Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
Affected: 1.3.0 before 1.5.0
Showing 5