Most recent entries from all

bdu:2025-11260

BIT-vault-2025-6015 — Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse

Affected: Bitnami: vault

Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

CLEANSTART-2026-PZ14685 — Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused

Affected: CleanStart: vault

Security vulnerability affects the vault package. Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused.

EUVD-2026-248906

fkie_cve-2025-6015

GHSA-v6r4-35f9-9rpw — Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability

Affected: Go: github.com/hashicorp/vault

openSUSE-SU-2025:15434-1 — govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media

WID-SEC-W-2025-1702 — Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.