https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:12:42.938937+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-consul-2023-2816 BIT-consul-2023-2816 — Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner 2026-10-15T16:12:43.011898+00:00

Affected: Bitnami: consul

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

 https://cve.radiocsirt.org/vuln/euvd-2026-193685 EUVD-2026-193685 2026-10-15T16:12:43.011982+00:00 EUVD-2026-193685 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2816 fkie_cve-2023-2816 2026-10-15T16:12:43.012000+00:00

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

 https://cve.radiocsirt.org/vuln/ghsa-rqjq-ww83-wv5c GHSA-rqjq-ww83-wv5c — Hashicorp Consul allows user with service:write permissions to patch remote proxy instances 2026-10-15T16:12:43.012023+00:00

Affected: Go: github.com/hashicorp/consul

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

 https://cve.radiocsirt.org/vuln/gsd-2023-2816 gsd-2023-2816 2026-10-15T16:12:43.012044+00:00 gsd-2023-2816 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2816 msrc_CVE-2023-2816 — Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner 2026-10-15T16:12:43.012055+00:00 msrc_CVE-2023-2816 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2816 UBUNTU-CVE-2023-2816 2026-10-15T16:12:43.012070+00:00

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.