CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: vault-fips, vault...

Security Bulletin: Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

Summary An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any...

CVE-2026-3605

creationtimestamp| type| source ---|---|--- 2026-04-17 05:15:31+00:00| seen| Telegram/ZsD0WH1x-fGDClxVyGq1OwOyswCrVsbtDHfPHjSJRDr2T4Y 2026-04-17 06:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjobjwdjez22 2026-04-17 13:00:37+00:00| seen|...