Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:18 +0000 bdu:2026-08963 https://cve.radiocsirt.org/vuln/bdu:2026-08963 bdu:2026-08963 https://cve.radiocsirt.org/vuln/bdu:2026-08963 BIT-vault-2026-5052 — Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS https://cve.radiocsirt.org/vuln/bit-vault-2026-5052 <p><strong>Affected:</strong> Bitnami: vault</p> <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Bitnami: vault</p> <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/bit-vault-2026-5052 EUVD-2026-291833 https://cve.radiocsirt.org/vuln/euvd-2026-291833 EUVD-2026-291833 https://cve.radiocsirt.org/vuln/euvd-2026-291833 fkie_cve-2026-5052 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5052 <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5052 GHSA-8r5m-3f66-qpr3 — HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS https://cve.radiocsirt.org/vuln/ghsa-8r5m-3f66-qpr3 <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/ghsa-8r5m-3f66-qpr3 WID-SEC-W-2026-1164 — Hashicorp Vault Community Edition und Enterprise: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164 <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164