TO
Product
Tooling
11
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 4High 5Medium 2Low 0
Watch
Add Tooling to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16326 | 10.0 | Jul 29 | consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode Affected: 0.1.0 before 0.1.4 |
| CVE-2026-16498 | 10.0 | Jul 28 | terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode Affected: 0.3.0 before 1.1.0 |
| CVE-2026-110720 New | 9.9 | Oct 26 | Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules Affected: 0.42.0 before 2.0.4 |
| CVE-2026-8715 | 9.6 | Aug 13 | Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath Affected: 1.3.0 before 1.5.0 |
| CVE-2026-16496 | 8.9 | Jul 28 | terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user Affected: 0.3.0 before 1.1.0 |
| CVE-2026-16328 | 8.6 | Jul 29 | consul-mcp-server vulnerable to server side request forgery leading to token exposure Affected: 0.1.0 before 0.1.4 |
| CVE-2026-14869 | 8.6 | Jul 28 | terraform-mcp-server vulnerable to server side request forgery leading to token exposure Affected: 0.3.0 before 1.1.0 |
| CVE-2026-87993 | 7.7 | Sep 10 | Consul-template vulnerable to an information disclosure issue in error handling Affected: 0.27.2 before 0.43.0 |
| CVE-2026-4660 | 7.5 | Apr 9 | Go-getter may allow to arbitrary filesystem reads through git operations Affected: before 1.8.6 |
| CVE-2026-14361 | 4.7 | Jul 8 | Consul-template is vulnerable to path redirection in writeToFile through symlink attack Affected: 0.1.0 before 0.42.1 |
| CVE-2026-5061 | 4.7 | May 12 | Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack Affected: 0.1.0 before 0.42.0 |
Showing 11
