Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Consul Enterprise Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-88021`Consul vulnerable to an authorization bypass in the Connect service mesh	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityHigh
`CVE-2026-87107`Consul vulnerable to an authorization bypass in the catalog deregistration path	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityMedium
`CVE-2026-87106`Consul vulnerable to a denial of service in the native RPC listener	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityMedium
`CVE-2026-87090`Consul vulnerable to an authorization bypass in the catalog node-write path	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityHigh
`CVE-2026-19113`Unauthenticated denial of service via unbounded request body processing	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-15972`Unauthenticated denial of service via unbounded external gRPC connection acceptance	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityHigh
`CVE-2026-15970`L7 intention authorization bypass via custom public listener	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-19017`Consul vulnerable to partial arbitrary file read via Vault Connect CA provider	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-19015`Uncontrolled resource consumption in the Consul Connect CA roots endpoint	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-19014`Uncontrolled resource consumption in the Consul Connect authorization endpoint	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-19012`Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-19016`Authorization bypass for session deletion in the transaction API	Exploitation statusNot known exploited	FixYes	Published08/07/2026	SeverityMedium
`CVE-2026-2808`Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider	Exploitation statusNot known exploited	FixYes	Published03/11/2026	SeverityMedium
`CVE-2025-11374`Consul's KV endpoint is vulnerable to denial of service	Exploitation statusNot known exploited	FixYes	Published10/28/2025	SeverityMedium
`CVE-2025-11375`Consul's event endpoint is vulnerable to denial of service	Exploitation statusNot known exploited	FixYes	Published10/28/2025	SeverityMedium
`CVE-2024-10086`Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation	Exploitation statusNot known exploited	FixYes	Published10/30/2024	SeverityMedium
`CVE-2024-10006`Consul L7 Intentions Vulnerable To Headers Bypass	Exploitation statusNot known exploited	FixYes	Published10/30/2024	SeverityHigh
`CVE-2024-10005`Consul L7 Intentions Vulnerable To URL Path Bypass	Exploitation statusNot known exploited	FixYes	Published10/30/2024	SeverityHigh
`CVE-2023-3518`JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access	Exploitation statusNot known exploited	FixYes	Published08/09/2023	SeverityHigh
`CVE-2023-1297`Consul Cluster Peering can Result in Denial of Service	Exploitation statusNot known exploited	FixYes	Published06/02/2023	SeverityMedium
`CVE-2023-2816`Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner	Exploitation statusNot known exploited	FixNot confirmed	Published06/02/2023	SeverityHigh
`CVE-2023-0845`Consul Server Panic when Ingress and API Gateways Configured with Peering	Exploitation statusNot known exploited	FixYes	Published03/09/2023	SeverityMedium
`CVE-2022-3920`Consul Peering Imported Nodes/Services Leak	Exploitation statusNot known exploited	FixYes	Published11/15/2022	SeverityMedium

23 / 23 Results

All vulnerabilities loaded

Security vulnerabilities in Consul Enterprise

Consul Enterprise

How many security vulnerabilities does Consul Enterprise currently have?

Does the latest version of Consul Enterprise have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management