Threats tagged 'bit-openbao-2026-115363'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.1	CVE-2026-115363OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration Low2.12026-10-29GCVE DatabaseCVE-2026-115363 OpenBao versions 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 have an information disclosure vulnerability that exposes the tls_acme_eab_mac_key via the sanitized configuration endpoint. This key is used for ACME External Account Binding for TLS listener certificates, and its exposure allows unauthorized binding to the operator's ACME account. The issue is fixed in versions 2.6.4 and 2.7.1. Report on CVE-2026-115363 Vulnerability #bit-openbao-2026-115363 #bitnami	GCVE Database	2026-10-29

Page 1 of 1