HashiCorp Consul vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20234
3. 20243
4. 20252
5. 202617

Newest CVEs

• CVE-2026-115804

  Consul vulnerable to an authorization bypass in health check registration

  HashiCorp · Consul

  Medium6.4
• CVE-2026-105626

  Consul vulnerable to a denial of service in HTTP APIs

  HashiCorp · Consul

  High7.5
• CVE-2026-105608

  Consul vulnerable to an authorization bypass in service mesh registration

  HashiCorp · Consul

  High8.8
• CVE-2026-105765

  Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API

  HashiCorp · Consul

  High7.5
• CVE-2026-88021

  Consul vulnerable to an authorization bypass in the Connect service mesh

  HashiCorp · Consul

  High7.5
• CVE-2026-87107

  Consul vulnerable to an authorization bypass in the catalog deregistration path

  HashiCorp · Consul

  Medium5.4
• CVE-2026-87106

  Consul vulnerable to a denial of service in the native RPC listener

  HashiCorp · Consul

  Medium6.5
• CVE-2026-87090

  Consul vulnerable to an authorization bypass in the catalog node-write path

  HashiCorp · Consul

  High8.3
• CVE-2026-19113

  Unauthenticated denial of service via unbounded request body processing

  HashiCorp · Consul

  Medium5.3
• CVE-2026-15972

  Unauthenticated denial of service via unbounded external gRPC connection acceptance

  HashiCorp · Consul

  High7.5