26
CVEs
2
Critical
9
High
0
KEV
3
PoC
1
Unpatched C/H
84.6%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
9
MEDIUM
13
LOW
1
Monthly CVE Trend
Affected Products (30)
Vault
73
Nomad
35
Enterprise Vault
16
Consul Enterprise
12
Tooling
9
Kubernetes
9
Go Getter
9
Docker
8
Openbao
7
Remote Desktop Manager
7
Server
7
Boundary
6
Vault Enterprise
6
Terraform Enterprise
6
Cryptomator
6
Python
5
Terraform
5
Audit Vault And Database Firewall
5
Edge Virtualization Engine
4
Vagrant Vmware Fusion
4
Vagrant
4
1Password
4
Devolutions Server
4
Go Slug
3
Camel
3
Syspass
3
Rios
3
Coder
3
Atlantis
3
Nomad Enterprise
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-55108 | Unbounded symlink-following in KubeVela's Terraform remote configuration loader allows any principal with `ComponentDefinition` create/update RBAC rights to OOM-kill the cluster-wide vela-core controller and halt all OAM application reconciliation. The root cause (CWE-59) is that `GetTerraformConfigurationFromRemote` in `pkg/controller/utils/capability.go` calls `os.ReadFile` on a symlink target without verifying the target is a regular file or bounding the read size; a repository containing `variables.tf -> /dev/zero` is sufficient to exhaust controller memory before HCL parsing is ever reached. No CISA KEV listing has been identified at time of analysis, but a complete proof-of-concept with exact reproduction commands is publicly disclosed in GHSA-fmgp-q6jx-gg3x, materially lowering the exploitation bar. | HIGH | 8.5 | 0.6% | 63 |
PoC
|
| CVE-2026-64679 | Path traversal in Atlantis workspace handling (versions 0.19.8 through 0.44.x) allows authenticated users to escape the intended workspace directory boundary, triggering os.RemoveAll and os.MkdirAll operations on arbitrary filesystem paths with Atlantis process privileges. A crafted workspace value such as '../../../../../../../../tmp/f1-canary' - supplied via repository atlantis.yaml or authenticated /api/plan API input - causes Atlantis to operate on out-of-bounds directories before Terraform rejects the invalid workspace name. A working proof-of-concept is documented in GHSA-26w5-6g95-gj28; the vulnerability is not in CISA KEV and no public exploit kit has been identified at time of analysis. | HIGH | 8.1 | 0.4% | 61 |
PoC
|
| CVE-2026-12564 | Server-side request forgery in the Red Hat Ansible Automation Platform 2 Controller's HashiCorp Vault credential plugin lets an authenticated user with credential-creation rights force the controller pod to leak its own Kubernetes service account token. When a HashiCorp Vault Secret Lookup credential configured for kubernetes_role authentication is tested, the kubernetes_auth() routine in awx_plugins/credentials/hashivault.py transmits the pod token to an attacker-supplied URL. With that token the attacker gains Kubernetes API access to control-plane namespaces, enabling full pod CRUD and secret reads including database credentials and the Django SECRET_KEY. No public exploit identified at time of analysis, and the flaw is not on the CISA KEV list. | CRITICAL | 9.6 | 0.3% | 48 |
No patch
|
| CVE-2026-81681 | Sensitive-file exposure in the openssl-encrypt pip package (openssl_encrypt) at versions <= 1.4.8 stems from its 'Encrypted USB Workspace' feature writing a marker that falsely declares the workspace AES-256-GCM encrypted while the derived key is never applied and the directory remains in cleartext. Users who trust the branding and store files in the workspace leave them fully readable on the removable media, so anyone with physical possession of the USB device can recover the data. No public exploit identified at time of analysis and the flaw is not in CISA KEV, but the failure silently defeats the product's core security promise. | CRITICAL | 9.3 | 0.1% | 47 |
|
| CVE-2026-57441 | MCPVault, a lightweight Model Context Protocol server that exposes Obsidian vault files to AI agents, fails to block access to restricted directories such as .git, .obsidian, and node_modules in versions prior to 0.11.4. PathFilter compiles its deny-list patterns case-sensitively and matches raw path segments, so on case-insensitive macOS and Windows filesystems variants like .Git/config or .GIT/config (and on Windows, trailing-dot/space forms such as .git./config) pass both isAllowed() and isAllowedForListing() while the operating system still opens the real restricted directory. An attacker who can influence a path selected by an AI agent can then read, write, move, search, or list sensitive repository and Obsidian metadata; no public exploit code or CISA KEV entry was identified at time of analysis. | HIGH | 8.4 | – | 42 |
|
| CVE-2026-87090 | Authorization bypass in HashiCorp Consul's catalog node-write path allows any authenticated principal holding a node-write token-scoped to any node name whatsoever-to delete a different node's catalog registration and seize that node's identity within the service mesh. All Consul open-source and Enterprise versions prior to the fixed releases are affected, making shared or multi-tenant Consul clusters with delegated node-write tokens particularly exposed. No public exploit code or active exploitation has been identified at time of analysis, but the low access complexity and the typically discoverable nature of node IDs make this a credible lateral-movement and disruption vector in production service-mesh deployments. | HIGH | 8.3 | 0.2% | 42 |
|
| CVE-2026-63443 | Let me analyze this CVE and produce the JSON. CVE-2026-63443: Coder workspace agent API insecure redirect handling. Affected: Coder (coder/coder) versions < 2.29.19, < 2.32.9, < 2.33.10, < 2.34.4. CVSS 8.3, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. CWE-863 (Incorrect Authorization). Attacker: authenticated user with running workspace and control over modified workspace agent; knows victim agent UUID → derives tailnet IP. Redirects control-plane requests to victim agent. File read/write as victim, and process API command execution. Tags: Authentication Bypass, Hashicorp, Coder. Hashicorp tag is mislabeled — Coder is not HashiCorp (though it uses Terraform, which is HashiCorp). Actually description mentions Terraform "allows organizations to provision remote development environments via Terraform". The tag "Hashicorp" is arguably wrong — Coder Inc. is the vendor. Hmm, but they do build on Terraform. I'd flag "Hashicorp" as wrong_vendor with suggested "coder". Confidence high? The CPE is coder:coder. Yes, flag it. Also "Authentication Bypass" tag — this is more of a broken access control / cross-tenant redirection, not really auth bypass. But I'm less confident; the guidance says only flag mislabeled tags I can verify. "Authentication Bypass" is arguably a mislabel since exploitation requires authenticated user (PR:L). Hmm. I could flag it as mislabeled_tag with suggested "authorization bypass" or something. But suggesting a tag slug... maybe "broken-access-control". It's borderline. I'll consider including it with medium confidence. Actually the instructions say only emit when highly confident and verifiable. The tag "Authentication Bypass" conflicts with PR:L authenticated. I think it's reasonably confident this is not an authentication bypass — it's an authorization/redirect flaw. I'll include it with medium confidence. Hmm, risk of noise. Let me include both: wrong_vendor for "Hashicorp" (high) and mislabeled_tag for "Authentication Bypass" (medium). Maybe also miss | HIGH | 8.3 | – | 42 |
|
| CVE-2026-87993 | Vault secret values leak into error messages, log output, and Nomad task events in HashiCorp consul-template due to improper error handling. The vulnerability affects consul-template deployments integrated with HashiCorp Vault, where a template rendering error can inadvertently expose secret values to any downstream surface that receives error text - including Nomad task event logs readable by lower-privileged operators. The scope-changed CVSS vector (S:C) reflects that the primary harm falls on systems outside consul-template itself: Vault secrets meant to be accessed only by privileged services instead persist in Nomad task events and logging infrastructure accessible to broader audiences. | HIGH | 7.7 | 0.3% | 38 |
|
| CVE-2026-76362 | Improper TLS certificate validation in Splunk SOAR's CyberArk REST client exposes all credential vault traffic to interception and tampering by a network-positioned attacker. Versions below 8.6.0 are affected when a CyberArk REST credential manager integration is configured; the client accepts any server certificate without verification, making TLS sessions transparent to a man-in-the-middle. No public exploit code has been identified at time of analysis, and the vulnerability is absent from the CISA KEV catalog, but the high confidentiality and integrity impact on privileged credential data warrants priority remediation in environments relying on CyberArk for SOAR playbook secrets. | HIGH | 7.4 | 0.2% | 37 |
|
| CVE-2026-19589 | Path traversal (CWE-22) in HashiCorp Packer's third-party plugin installer through version 1.15.4 permits a crafted plugin archive to write files outside the intended extraction directory, enabling code execution on the host. Users who install plugins from malicious or compromised sources trigger the vulnerability through the normal `packer plugins install` workflow. No public exploit code has been identified at time of analysis, and a vendor-released fix is available in Packer 1.16.0. | HIGH | 7.1 | 0.1% | 36 |
|
| CVE-2026-88021 | Authorization bypass in HashiCorp Consul's Connect service mesh allows a low-privileged authenticated service to communicate with destination services it is not authorized to reach. The flaw originates in Consul's Envoy RBAC rule generation: unescaped special characters in service names, namespaces, or partitions cause the generated matching rules to be overly permissive, defeating the Connect intentions authorization model. No public exploit or CISA KEV listing exists at time of analysis; fixes are available across Consul open-source and Enterprise release trains. | HIGH | 7.1 | 0.2% | 36 |
|
| CVE-2026-3855 | Improper validation of parameters in GitLab CE/EE's Terraform state upload functionality allows an authenticated user holding project-level permissions to read restricted file contents on the server or cause denial of service. Affected releases are all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2, with fixes published in the 19.3.2 patch release. Public exploit details exist via a HackerOne report, but the CVSS base score is only 3.1 (AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N); there is no CISA KEV listing and no EPSS data was provided. | LOW | 3.1 | – | 36 |
PoC
|
| CVE-2026-45099 | Arbitrary file deletion in Terragrunt before v1.0.4 allows an attacker who controls a remote module source to delete any file accessible to the Terragrunt process by embedding directory traversal paths in a forged `.terragrunt-module-manifest` file within the module. The deletion occurs automatically during the module download and initialization phase - before OpenTofu or Terraform executes - making CI/CD pipelines that consume external modules particularly exposed. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v1.0.4. Note: an 'RCE' tag in the source metadata directly contradicts the vendor advisory's explicit statement that this is a deletion-only primitive with no code execution or data exfiltration capability. | MEDIUM | 6.9 | 0.5% | 35 |
|
| CVE-2026-15580 | Vault token disclosure in the N-able PassPortal browser extension (versions before 3.49.6) stems from missing origin validation on postMessage events, classified under CWE-1385. A malicious web page can send a crafted postMessage to the extension listener, causing it to disclose HashiCorp Vault tokens to an untrusted origin - enabling authentication abuse against any Vault instance the user's session is authorized to access. No public exploit code has been identified at time of analysis, but the network-accessible, unauthenticated attack path (UI:A in CVSS 4.0) and high confidentiality impact make this a meaningful credential theft risk for MSP environments. | MEDIUM | 6.9 | 0.2% | 35 |
|
| CVE-2026-57442 | The MCPVault npm package (a lightweight Model Context Protocol server that gives AI agents access to an Obsidian vault) anchored its restricted-directory deny-list to the vault root in versions before 0.11.5, so nested .git, .obsidian and node_modules directories silently pass both isAllowed() and isAllowedForListing(). An attacker who influences which path an AI agent reads — typically through prompt injection in content the agent ingests — can cause nested .git/config files (remote URLs, embedded tokens) or nested Obsidian metadata to be read, and can pollute the listAllTags index with nested node_modules content. No public exploit code or CISA KEV entry was identified at the time of analysis; the vendor shipped the fix in 0.11.5. | MEDIUM | 6.9 | – | 34 |
|