Количество 5
Количество 5
CVE-2026-5052
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
CVE-2026-5052
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
GHSA-8r5m-3f66-qpr3
HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
BDU:2026-08963
Уязвимость механизма PKI Vault платформ для архивирования корпоративной информации HashiCorp Vault Community Edition и Vault Enterprise, позволяющая нарушителю раскрыть конфиденциальную информацию
ROS-20260529-73-0011
Уязвимость vault
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-5052 Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16. | CVSS3: 5.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-5052 Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| GHSA-8r5m-3f66-qpr3 HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | BDU:2026-08963 Уязвимость механизма PKI Vault платформ для архивирования корпоративной информации HashiCorp Vault Community Edition и Vault Enterprise, позволяющая нарушителю раскрыть конфиденциальную информацию | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
 | ROS-20260529-73-0011 Уязвимость vault | CVSS3: 8.6 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу