https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:26:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05648 bdu:2026-05648 https://cve.radiocsirt.org/vuln/bdu:2026-05648 https://cve.radiocsirt.org/vuln/bit-vault-2026-3605 <p><strong>Affected:</strong> Bitnami: vault</p> <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fxed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Bitnami: vault</p> <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fxed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/bit-vault-2026-3605 https://cve.radiocsirt.org/vuln/euvd-2026-337291 EUVD-2026-337291 https://cve.radiocsirt.org/vuln/euvd-2026-337291 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3605 <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fxed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fxed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3605 https://cve.radiocsirt.org/vuln/ghsa-m2w4-8ggf-rj47 <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/ghsa-m2w4-8ggf-rj47 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10594-1 <p>openbao-2.5.3-1.1 on GA media</p> <p>openbao-2.5.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10594-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164 <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164