https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:03:29.932498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-vault-2023-3462 BIT-vault-2023-3462 — Vault's LDAP Auth Method Allows for User Enumeration 2026-10-03T09:03:30.088598+00:00

Affected: Bitnami: vault

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.

 https://cve.radiocsirt.org/vuln/euvd-2026-196627 EUVD-2026-196627 2026-10-03T09:03:30.088673+00:00 EUVD-2026-196627 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3462 fkie_cve-2023-3462 2026-10-03T09:03:30.088689+00:00

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.

 https://cve.radiocsirt.org/vuln/ghsa-9v3w-w2jh-4hff GHSA-9v3w-w2jh-4hff — HashiCorp Vault and Vault Enterprise vulnerable to user enumeration 2026-10-03T09:03:30.088713+00:00

Affected: Go: github.com/hashicorp/vault

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.

 https://cve.radiocsirt.org/vuln/gsd-2023-3462 gsd-2023-3462 2026-10-03T09:03:30.088736+00:00 gsd-2023-3462 https://cve.radiocsirt.org/vuln/rhsa-2023:6832 RHSA-2023:6832 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update 2026-10-03T09:03:30.088747+00:00

lapack: Out-of-bounds read in *larrv golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding hashicorp: html injection into web ui Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration golang.org/x/net/html: Cross site scripting hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets golang: net/http, net/textproto: denial of service from excessive memory allocation golang: html/template: improper sanitization of CSS values golang: html/template: improper handling of empty HTML attributes goproxy: Denial of service (DoS) via unspecified vectors. golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1928 WID-SEC-W-2023-1928 — Hashicorp Vault: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T09:03:30.088789+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um Informationen offenzulegen.