https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:58:50.636454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-vault-2026-14886 BIT-vault-2026-14886 — Vault Enterprise vulnerable to cross-namespace entity deletion 2026-10-04T09:58:50.698462+00:00

Affected: Bitnami: vault

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability (CVE-2026-14886) is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.

 https://cve.radiocsirt.org/vuln/euvd-2026-351630 EUVD-2026-351630 2026-10-04T09:58:50.698544+00:00 EUVD-2026-351630 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14886 fkie_cve-2026-14886 2026-10-04T09:58:50.698567+00:00

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability (CVE-2026-14886) is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.

 https://cve.radiocsirt.org/vuln/ghsa-rmq8-5gxg-mjqx GHSA-rmq8-5gxg-mjqx 2026-10-04T09:58:50.698607+00:00

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability (CVE-2026-14886) is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2729 WID-SEC-W-2026-2729 — Hashicorp Vault und Vault Enterprise: Mehrere Schwachstellen 2026-10-04T09:58:50.698636+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault und Vault Enterpriseausnutzen, um Informationen offenzulegen, Autorisierungsmechanismen zu umgehen und Daten zu manipulieren.