CE
Product
Consul Enterprise
by HashiCorp · last CVE Oct 26, 2026
19
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 6Medium 13Low 0
Watch

Add Consul Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105608
New
8.8
0%
Oct 26
Consul vulnerable to an authorization bypass in service mesh registration
Affected: 2.0.4 before 2.1.0
CVE-2026-87090
8.3
0%
Sep 10
Consul vulnerable to an authorization bypass in the catalog node-write path
Affected: 0.1.0 before 2.0.4
CVE-2026-105626
New
7.5
0%
Oct 26
Consul vulnerable to a denial of service in HTTP APIs
Affected: 0.6.0 before 2.1.0
CVE-2026-105765
New
7.5
0%
Oct 26
Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
Affected: 1.17.0 before 2.1.0
CVE-2026-15972
7.5
1%
Aug 7
Unauthenticated denial of service via unbounded external gRPC connection acceptance
Affected: 1.13.0 before 2.0.3
CVE-2026-88021
7.1
0%
Sep 10
Consul vulnerable to an authorization bypass in the Connect service mesh
Affected: 1.9.0 before 2.0.4
Showing 6