CVE-2026-87090 | HashiCorp Consul/Consul Enterprise prior 2.0.4/1.21.18/1.22.12 Catalog authorization

September 10, 2026 Yanac

A vulnerability was found in HashiCorp Consul and Consul Enterprise. It has been declared as very critical. Impacted is an unknown function of the component Catalog. The manipulation results in authorization bypass.

This vulnerability was named CVE-2026-87090. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More