VE
Product
Vault Enterprise
27
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Severity mix
Critical 1High 13Medium 11Low 2
Watch
Add Vault Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5006 | 6.8 | Aug 24 | Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths Affected: 0.11.0 before 2.0.4 |
| CVE-2025-6037 | 6.8 | Aug 1 | Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates Affected: before 1.20.1 |
| CVE-2025-6014 | 6.5 | Aug 1 | Vault TOTP Secrets Engine Code Reuse Affected: before 1.20.1 |
| CVE-2025-4166 | 6.5 | May 2 | Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin Affected: 0.10.0 before 1.19.2 |
| CVE-2024-8365 | 6.5 | Sep 2 | Vault Leaks AppRole Client Tokens And Accessor in Audit Log Affected: 1.16.7 before 1.17.5 |
| CVE-2026-105818 | 5.9 | Oct 7 | Vault PKI ACME Issues Certificate With Unvalidated SANs Affected: 1.14.0 before 2.1.2 |
| CVE-2025-6015 | 5.7 | Aug 1 | Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse Affected: 1.10.0 before 1.20.1 |
| CVE-2026-105820 | 5.4 | Oct 7 | Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution Affected: 0.0.1 before 2.1.2 |
| CVE-2025-6004 | 5.3 | Aug 1 | Vault Userpass and LDAP User Lockout Bypass Affected: 1.13.0 before 1.20.1 |
| CVE-2026-5051 | 4.4 | Jul 1 | Audit Log Plugin Directory Guard Bypass via Legacy path Option Affected: 1.19.0 before 2.0.1 |
| CVE-2026-12624 | 4.3 | Aug 10 | Vault vulnerable to LIST authorization bypass via trailing-slash strip Affected: before 2.0.3 |
Showing 11