Lucene search
+L

26 matches found

OSV
OSV
•added 2026/09/25 12:20 p.m.•7 views

BIT-CONSUL-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS5.9AI score0.00372EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-87090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another...

8.3CVSS5.7AI score0.00372EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/10 8:03 p.m.•15 views

Security Bulletin: Consul vulnerable to an authorization bypass in the catalog node-write path

Summary Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any sing...

8.3CVSS5.9AI score0.00372EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/10 7:17 p.m.•24 views

CVE-2026-87090

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS0.00372EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 6:54 p.m.•37 views

CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS0.00372EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 6:54 p.m.•21 views

CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS5.9AI score0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 6:54 p.m.•26 views

CVE-2026-87090

Consul and Consul Enterprise (HashiCorp) are affected by an authorization bypass in the catalog node-write path . An authenticated attacker holding a token with node-write permission on any single node name can, if they obtain the node ID of a node they do not control, delete that node's catalog ...

8.3CVSS5.9AI score0.00372EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/10 6:54 p.m.•9 views

CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS5.8AI score
SaveExploits0References4
HashiCorp Security Advisories
HashiCorp Security Advisories
•added 2026/09/10 6:45 p.m.•22 views

Consul vulnerable to an authorization bypass in the catalog node-write path

Summary Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node’s catalog registration and take over its node identity. An attacker with a token granting node-write permission on any sing...

8.3CVSS6.1AI score0.00372EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•8 views

CVE-2026-87090: Incorrect Authorization

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

8.3CVSS5.9AI score0.00372EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•22 views

PT-2026-89566

Name of the Vulnerable Software and Affected Versions Consul versions prior to 2.0.4 Consul Enterprise versions prior to 1.21.18 Consul Enterprise versions prior to 1.22.12 Consul Enterprise versions prior to 2.0.4 Description An authorization bypass exists in the catalog node-write path. An...

8.3CVSS5.8AI score0.00372EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/07/19 5:36 p.m.•26 views

SUSE CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

7.1CVSS5.9AI score0.00169EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/19 9:17 a.m.•21 views

CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

7.1CVSS0.00169EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/19 9:10 a.m.•22 views

EUVD-2026-45438

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

5.9AI score0.00169EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/19 9:10 a.m.•61 views

CVE-2026-53368

CVE-2026-53368 concerns the Linux kernel f2fs filesystem. Multiple sources describe a fix for fsck inconsistency caused by incorrect nat_entry flag handling during checkpoint sequencing. The root cause is that f2fs_need_dentry_mark() reads nat_entry flags without mutual exclusion with the checkpo...

7.1CVSS5.9AI score0.00169EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/07/19 9:10 a.m.•26 views

CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

7.1CVSS5.9AI score0.00169EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/07/19 9:10 a.m.•14 views

CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

5.9AI score0.00169EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/07/19 9:10 a.m.•52 views

CVE-2026-53368 f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

7.1CVSS0.00169EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•21 views

PT-2026-61070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An inconsistency in the f2fs file system occurs during fsck operations due to the incorrect usage of nat entry flags. The function f2fs need dentry mark reads these flags without mutual...

7.1CVSS5.8AI score0.00169EPSS
SaveExploits0
NVD
NVD
•added 2026/06/24 5:17 p.m.•28 views

CVE-2026-53017

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of natentry flag Data loss can occur when fsync is performed on a newly created file before any checkpoint has been written concurrently with a checkpoint operation. The scenario is as...

5.5CVSS0.00143EPSS
SaveExploits0References2
Rows per page
Query Builder