CVE-2026-32692 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-32692 PUBLISHED CVSS 7.599999904632568 HIGH

Juju has unauthorized update of out-of-scope Vault secrets

EPSS 0.03% · 8.4th percentile

Risk Scores

CVSS v3.1

7.599999904632568

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

EPSS Score

0.03%

8.4th percentile

Affected Products

Vendor	Product	Versions
github.com	juju/juju	0.0.0-20230919230135-f6a66aa91eec, 0.0.0-20230919230135-f6a66aa91eec
canonical	juju	3.1.6, 3.1.6
Canonical	Juju	3.1.6, 3.1.6

Timeline

Mar 18, 2026 CVE Published
Mar 18, 2026 PoC Published
Mar 18, 2026 CVE Updated
Mar 18, 2026 PoC Published
Mar 19, 2026 EPSS Score
Mar 20, 2026 EPSS Score
Mar 20, 2026 PoC Published
Mar 20, 2026 Security Advisory
Mar 21, 2026 EPSS Score
Mar 22, 2026 EPSS Score
Mar 22, 2026 Coalition ESS Score
Mar 23, 2026 EPSS Score

References

https://github.com/juju/juju/security/advisories/GHSA-89x7-5m5m-mcmm vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-32692 advisory
https://github.com/juju/juju/commit/d06919eb03ec68156818bcc304b5fe1c39a8f9e9 url
https://github.com/juju/juju package

Open in Interactive Console →