CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

EUVD-2026-75680

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-87106

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener . An authenticated client that can complete the internal RPC mTLS handshake may exhaust server memory before ACL authorization is evaluated , meaning a valid ACL token is not strictly required to trigger...