https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:06:01.787182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-consul-2026-87107 BIT-consul-2026-87107 — Consul vulnerable to an authorization bypass in the catalog deregistration path 2026-10-02T10:06:01.850566+00:00

Affected: Bitnami: consul

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/euvd-2026-366636 EUVD-2026-366636 2026-10-02T10:06:01.850622+00:00 EUVD-2026-366636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87107 fkie_cve-2026-87107 2026-10-02T10:06:01.850638+00:00

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/ghsa-h73p-f2fq-8x97 GHSA-h73p-f2fq-8x97 2026-10-02T10:06:01.850663+00:00

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87107 UBUNTU-CVE-2026-87107 2026-10-02T10:06:01.850679+00:00

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.