https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:04:47.524377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-consul-2026-87106 BIT-consul-2026-87106 — Consul vulnerable to a denial of service in the native RPC listener 2026-10-02T13:04:47.589775+00:00

Affected: Bitnami: consul

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a valid ACL token. This vulnerability (CVE-2026-87106) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/euvd-2026-366618 EUVD-2026-366618 2026-10-02T13:04:47.589831+00:00 EUVD-2026-366618 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87106 fkie_cve-2026-87106 2026-10-02T13:04:47.589849+00:00

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a valid ACL token. This vulnerability (CVE-2026-87106) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-q5mw-fjrj-6qmh GHSA-q5mw-fjrj-6qmh 2026-10-02T13:04:47.589873+00:00

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a valid ACL token. This vulnerability (CVE-2026-87106) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87106 UBUNTU-CVE-2026-87106 2026-10-02T13:04:47.589889+00:00

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a valid ACL token. This vulnerability (CVE-2026-87106) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.