← Back to feed Search feed

HashiCorp Vault vulnerabilities

11 entries matching vault — updated 2026-11-02 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-119414Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allowMEDIUM5.330%ileNVD2026-10-30
CVE-2026-13303HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential storeHIGH8.713%ileNVD2026-10-29
CVE-2026-117688A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutioMEDIUM5.320%ileNVD2026-10-29
CVE-2026-116678Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader vMEDIUM5.826%ileNVD2026-10-27
CVE-2026-116728libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024MEDIUM6.83%ileNVD2026-10-26
CVE-2026-116729libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001aMEDIUM4.83%ileNVD2026-10-26
CVE-2026-85925Azure Key Vault Client SDK Elevation of Privilege VulnerabilityHIGH8.244%ileMicrosoft2026-10-13
CVE-2026-85922Azure Key Vault Security Feature Bypass VulnerabilityHIGH7.449%ileMicrosoft2026-10-13
CVE-2026-88132Azure Key Vault Information Disclosure VulnerabilityMEDIUM5.925%ileMicrosoft2026-10-13
CVE-2026-62825Azure Key Vault Elevation of Privilege VulnerabilityCRITICAL10.060%ileMicrosoft2026-07-14
CVE-2025-68476KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account CredentialUNKNOWN—50%ileMicrosoft2025-12-09