HashiCorp Consul vulnerabilities
27 published CVEs name HashiCorp Consul among the affected products.
- 27Published CVEs27 of them scored
- 17Last 12 monthspublished in the last year
- 0Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115804
Consul vulnerable to an authorization bypass in health check registration
HashiCorp · Consul
Medium6.4 - CVE-2026-105626
Consul vulnerable to a denial of service in HTTP APIs
HashiCorp · Consul
High7.5 - CVE-2026-105608
Consul vulnerable to an authorization bypass in service mesh registration
HashiCorp · Consul
High8.8 - CVE-2026-105765
Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
HashiCorp · Consul
High7.5 - CVE-2026-88021
Consul vulnerable to an authorization bypass in the Connect service mesh
HashiCorp · Consul
High7.5 - CVE-2026-87107
Consul vulnerable to an authorization bypass in the catalog deregistration path
HashiCorp · Consul
Medium5.4 - CVE-2026-87106
Consul vulnerable to a denial of service in the native RPC listener
HashiCorp · Consul
Medium6.5 - CVE-2026-87090
Consul vulnerable to an authorization bypass in the catalog node-write path
HashiCorp · Consul
High8.3 - CVE-2026-19113
Unauthenticated denial of service via unbounded request body processing
HashiCorp · Consul
Medium5.3 - CVE-2026-15972
Unauthenticated denial of service via unbounded external gRPC connection acceptance
HashiCorp · Consul
High7.5