H
Vendor security profile
hashicorp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical2
CISA KEV0
Public exploit0
Patch rate%3
Avg. CVSS6.6
12-month vulnerability rate
2
0
0
0
0
3
0
0
0
14
6
5
CVE KEV
CVE severity distribution
31toplam CVE
Critical2 (6%)
High12 (39%)
Medium17 (55%)
Patch and exploitation view
%3
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
30Unknown
Latest vulnerabilities
5.3
CVE-2026-19585
Go-getter vulnerable to a path traversal in S3/GCS directory download handling
H
Patch status unknownEPSS %0
7.2
CVE-2026-89322
Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions
H
Patch status unknownEPSS %0
5.4
CVE-2026-105820
Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
H
Patch status unknownEPSS %0
8.0
CVE-2026-105816
Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
H
Patch status unknownEPSS %0
5.9
CVE-2026-105818
Vault PKI ACME Issues Certificate With Unvalidated SANs
H
Patch status unknownEPSS %0
6.7
CVE-2026-88922
Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
H
Patch status unknownEPSS %0
7.7
CVE-2026-87993
Consul-template vulnerable to an information disclosure issue in error handling
H
Patch status unknownEPSS %0
7.5
CVE-2026-88021
Consul vulnerable to an authorization bypass in the Connect service mesh
H
Patch status unknownEPSS %0
5.4
CVE-2026-87107
Consul vulnerable to an authorization bypass in the catalog deregistration path
H
Patch status unknownEPSS %0
6.5
CVE-2026-87106
Consul vulnerable to a denial of service in the native RPC listener
H
Patch status unknownEPSS %0