https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T22:52:49.718745+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bit-consul-2026-87107 BIT-consul-2026-87107 — Consul vulnerable to an authorization bypass in the catalog deregistration path 2026-10-02T22:52:49.726136+00:00

Affected: Bitnami: consul

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-87107 fkie_cve-2026-87107 2026-10-02T22:52:49.726374+00:00

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://vulnerability.circl.lu/vuln/ghsa-h73p-f2fq-8x97 GHSA-h73p-f2fq-8x97 2026-10-02T22:52:49.726495+00:00

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-87107 UBUNTU-CVE-2026-87107 2026-10-02T22:52:49.726590+00:00

Affected: Ubuntu:18.04:LTS: consul, Ubuntu:20.04:LTS: consul, Ubuntu:22.04:LTS: consul

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may exploit this issue to remove services, checks, or nodes imported from a peered cluster without holding authority over the peer origin. This vulnerability (CVE-2026-87107) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.