Threats tagged 'bit-vault-2026-5052'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-5052HashiCorp Vault · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.3%2026-04-17CVE Database V5CVE-2026-5052 CVE-2026-5052 is a Server-Side Request Forgery (SSRF) vulnerability in HashiCorp Vault's PKI engine ACME validation. The vulnerability allows local network targets to be requested during http-01 and tls-alpn-01 challenge issuance, potentially leading to information disclosure. This issue affects Vault version 1.15.0 and was fixed in Vault Community Edition 2.0.0 and Vault Enterprise versions 2.0.0, 1.21. EPSS 0.3%Vulnerability CWE-918 #bit-vault-2026-5052 #bitnami	CVE Database V5	2026-04-17

Page 1 of 1