CVE-2026-5052

Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

• CWE-918

• https://discuss.hashicorp.com/t/hcsec-2026-06-vault-vulnerable-to-server-side-request-forgery-in-acme-challenge-validation-via-attacker-controlled-dns/77343Vendor Advisory

Published

Apr 17, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50512Missing authentication for critical function in Microsoft PC…7.8
• CVE-2026-50515Deserialization of untrusted data in Azure Service Bus allow…9.9
• CVE-2026-50516Missing authentication for critical function in Microsoft Az…9.4
• CVE-2026-50517Deserialization of untrusted data in M365 Copilot allows an …9.9
• CVE-2026-50518Heap-based buffer overflow in Windows DHCP Server allows an …9.8
• CVE-2026-50519Initialization of a resource with an insecure default in Git…7.5
• CVE-2026-50520Improper neutralization of special elements used in a comman…8.4
• CVE-2026-50521Use after free in Microsoft Edge (Chromium-based) allows an …8.3
• CVE-2026-50522Deserialization of untrusted data in Microsoft Office ShareP…9.8
• CVE-2026-50524Improper validation of specified type of input in .NET Frame…7.5
• CVE-2026-50525Allocation of resources without limits or throttling in .NET…7.5
• CVE-2026-50526Improper link resolution before file access ('link following…5.5