Sploitus

24 exploited vulnerabilities in Hashicorp Consul

Vulnerabilities with publicly known exploits

Vendors
Hashicorp, Opensuse, Suse, Cleanstart, Alpaquita, Debian
With known exploits
24
Affected Hashicorp Consul Docker Image versions
≤ 1.4.2
Affected Golang Net versions
< 0.55.0
Affected Golang Crypto versions
< 0.52.0
Affected Hashicorp Consul versions
< 1.15.3, 1.20.1, 1.15.15, 1.18.5, 1.19.3, 1.20.0, 1.14.7, 1.13.3, 1.9.17, 1.10.10, 1.11.5, 1.16.0, 1.4.3, 1.18.12, 1.22.0, 1.20.8, 1.21.6, 1.11.9, 1.12.5, 1.13.2, 1.9.15, 1.10.8, 1.11.3, 1.14.5
Affected Gitlab versions
< 16.2.8, 16.3.5, 16.4.0

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2020-29564
CVSS 10.0 CRITICAL 2020-12-08
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46598
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46597
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39827
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39828
CVSS 8.8 HIGH 2026-05-22
CVE-2023-2816
CVSS 8.7 HIGH 2023-06-02
CVE-2024-10005
CVSS 8.6 HIGH 2024-10-30FIX AVAILABLE
CVE-2024-10006
CVSS 8.3 HIGH 2024-10-30FIX AVAILABLE
CVE-2023-5332
CVSS 8.1 HIGH 2023-12-03
CVE-2023-1297
CVSS 7.8 HIGH 2023-06-02FIX AVAILABLE
CVE-2022-3920
CVSS 7.8 HIGH 2022-11-15FIX AVAILABLE
CVE-2022-29153
CVSS 7.8 HIGH 2022-04-19FIX AVAILABLE
CVE-2023-3518
CVSS 7.4 HIGH 2023-08-09FIX AVAILABLE
CVE-2019-9764
CVSS 7.4 HIGH 2019-03-26FIX AVAILABLE
CVE-2026-2808
CVSS 6.8 MEDIUM 2026-03-11FIX AVAILABLE
CVE-2025-11374
CVSS 6.8 MEDIUM 2025-10-28FIX AVAILABLE
CVE-2025-11375
CVSS 6.8 MEDIUM 2025-10-28FIX AVAILABLE
CVE-2022-40716
CVSS 6.8 MEDIUM 2022-09-23FIX AVAILABLE
CVE-2026-25680
CVSS 6.5 MEDIUM 2026-05-22
CVE-2022-24687
CVSS 6.5 MEDIUM 2022-02-16FIX AVAILABLE
CVE-2024-10086
CVSS 6.4 MEDIUM 2024-10-30FIX AVAILABLE
CVE-2026-42506
CVSS 6.1 MEDIUM 2026-05-22
CVE-2023-0845
CVSS 6.1 MEDIUM 2023-03-07FIX AVAILABLE