VDB
DEBIAN-CVE-2026-2808
DEBIAN-CVE-2026-2808
PUBLISHED
CVSS 6.800000190734863 MEDIUM
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5.
Risk Scores
CVSS v3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | consul | 0, 1.10.12+dfsg1-1, 1.8.7+dfsg1-2 |
Exploit Intelligence
- CVE-2026-2808.json (github-poc)
- 2026.xml (github-poc)
- 2026.xml (github-poc)
Timeline
- Mar 12, 2026 CVE Published
- Apr 28, 2026 CVE Updated