CVE-2026-115804
Last modified
CVE-2026-115804 is a medium-severity vulnerability rated 6.4/10 on the CVSS scale. HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19..
Description
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| HashiCorp | Consul | >= 0.7.2, < 2.1.0 |
| HashiCorp | Consul Enterprise | >= 0.7.2, < 2.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-115804?
How severe is CVE-2026-115804?
How do I fix CVE-2026-115804?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1158A security flaw has been discovered in Totolink LR350 9.3.5u…8.8
- CVE-2026-11580The Kali Forms — Contact Form & Drag-and-Drop Builder WordPr…5.5
- CVE-2026-115800A vulnerability was identified in UbiquitousLearning mllm up…5.3
- CVE-2026-115801A security flaw has been discovered in Kakao khaiii up to 0.…5.3
- CVE-2026-115802A weakness has been identified in InternScience InternAgent …4.3
- CVE-2026-115803A flaw has been found in Scada-LTS 2.8.0. Affected by this v…4.3
- CVE-2026-115805Improper handling of local filesystem paths in Rapid7 Insigh…7.8
- CVE-2026-115806The Prime Mover – Backup and Migration plugin for WordPress …9.8
- CVE-2026-115807The User Profile Builder – Beautiful User Registration Forms…7.1
- CVE-2026-11581The Kali Forms — Contact Form & Drag-and-Drop Builder WordPr…5.9
- CVE-2026-115810Tandoor Recipes before 2.7.0 contains a server-side request …7.7
- CVE-2026-115812Relative path traversal during model archive extraction in A…9.8
Are you affected by CVE-2026-115804?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST