1 matches found
CVE-2026-14886: Missing Authorization
Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability CVE-2026-14886 is fixed...
8.2CVSS5.9AI score0.00329EPSS
SaveExploits0References2
20