https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:52:34.432377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07431 bdu:2024-07431 2026-10-15T21:52:34.502996+00:00 bdu:2024-07431 https://cve.radiocsirt.org/vuln/bit-vault-2024-8365 BIT-vault-2024-8365 — Vault Leaks AppRole Client Tokens And Accessor in Audit Log 2026-10-15T21:52:34.503034+00:00

Affected: Bitnami: vault

Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors being stored in the audit log. This vulnerability, CVE-2024-8365, was fixed in Vault Community Edition and Vault Enterprise 1.17.5 and Vault Enterprise 1.16.9.

 https://cve.radiocsirt.org/vuln/euvd-2026-161376 EUVD-2026-161376 2026-10-15T21:52:34.503073+00:00 EUVD-2026-161376 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8365 fkie_cve-2024-8365 2026-10-15T21:52:34.503087+00:00

Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors being stored in the audit log. This vulnerability, CVE-2024-8365, was fixed in Vault Community Edition and Vault Enterprise 1.17.5 and Vault Enterprise 1.16.9.

 https://cve.radiocsirt.org/vuln/ghsa-jjxf-26c9-77gm GHSA-jjxf-26c9-77gm — Vault Leaks Client Token and Token Accessor in Audit Devices 2026-10-15T21:52:34.503111+00:00

Affected: Go: github.com/hashicorp/vault

Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors being stored in the audit log. This vulnerability, CVE-2024-8365, was fixed in Vault Community Edition and Vault Enterprise 1.17.5 and Vault Enterprise 1.16.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1961 WID-SEC-W-2024-1961 — Hashicorp Vault: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-15T21:52:34.503134+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um Informationen offenzulegen.