Serial Number: AV26-1106 Date: October 30, 2026 As of October 29, 2026, HashiCorp is affected by vulnerabilities in the following products: Nomad Prior to 2.1.0 Nomad Enterprise Prior to 2.1.0 Prior to 1.11.12 Prior to 1.10.18 Boundary Prior to 1.0.2 Boundary Enterprise Prior to 1.0.2 and 0.21.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-52 - Nomad dispatch payload writes can escape…
Serial Number: AV26-1087 Date: October 26, 2026 As of October 26, 2026, HashiCorp is affected by a vulnerability in the following products: Consul Prior to 2.1.0 Consul Enterprise Prior to 1.21.19 Prior to 2.1.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-46 - Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API Security - HashiCorp Discuss
Serial number: AV26-1019 Date: October 8, 2026 As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Community Edition Prior to 2.1.2 Vault Enterprise Prior to 1.19.23 Prior to 1.20.17 Prior to 1.21.12 Prior to 2.1.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries…
HashiCorp ha rilasciato aggiornamenti di sicurezza che sanano 4 vulnerabilità, di cui 2 con gravità "alta", in Vault Enterprise e Community Edition, soluzioni per la gestione centralizzata e sicura di segreti, credenziali e accessi. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato autenticato, in determinate condizioni, di elevare i propri privilegi ed eseguire codice arbitrario sui sistemi interessati.
Serial Number: AV26-910Date: September 11, 2026 As of September 10, 2026, HashiCorp is affected by vulnerabilities in the following products: Consul Prior to 2.0.4 Consul Enterprise 1.0 Prior to 1.21.18 21.0 Prior to 1.21.18 9.0 Prior to 1.21.18 consul-template Prior to 0.43.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog…
Serial number: AV26-817Date: August 14, 2026 As of August 13, 2026, HashiCorp is affected by a vulnerability in the following product Vault Secrets Operator - Prior to 1.5.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath Security - HashiCorp Discuss
Serial Number: AV26-797Date: August 11, 2026 As of August 10, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Prior to 2.0.3 Vault Enterprise multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-27 - Vault Enterprise vulnerable to cross-namespace entity deletion - Security - HashiCorp Discuss Security - HashiCorp Discuss
Serial Number: AV26-791Date: August 10, 2026 As of August 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Consul Community Edition Prior to 2.0.3 Consul Enterprise Prior to 2.0.3 Prior to 1.22.11 Prior to 1.21.17 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul - Security - HashiCorp Discuss Security -…