Sploitus

22 exploited vulnerabilities in Vault

Vulnerabilities with publicly known exploits

Vendors
Hashicorp, Opensuse, Suse, Cleanstart, Alpaquita, Debian
With known exploits
22
Affected Golang Net versions
< 0.55.0
Affected Golang Crypto versions
< 0.52.0
Affected Hashicorp Vault versions
< 1.16.23, 1.20.1, 1.18.12, 1.19.7, 1.20.0, 1.16.27, 1.21.0, 1.18.15, 1.19.11, 1.20.5, 1.15.16, 1.20.2, 1.16.24, 1.18.13, 1.19.8, 1.15.12, 1.16.6, 1.17.2, 1.14.11, 1.16.0, 1.15.7, 1.8.9, 1.9.4

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2020-35192
CVSS 10.0 CRITICAL 2020-12-17FIX AVAILABLE
CVE-2026-42506
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-25680
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46598
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46597
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39828
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39827
CVSS 9.8 CRITICAL 2026-05-22
CVE-2025-6000
CVSS 9.1 CRITICAL 2025-08-01FIX AVAILABLE
CVE-2025-6037
CVSS 9.0 HIGH 2025-08-01FIX AVAILABLE
CVE-2026-4525
CVSS 8.8 HIGH 2026-04-16FIX AVAILABLE
CVE-2025-11621
CVSS 8.5 HIGH 2025-10-23FIX AVAILABLE
CVE-2025-6013
CVSS 8.5 HIGH 2025-08-06FIX AVAILABLE
CVE-2025-12044
CVSS 7.8 HIGH 2025-10-23FIX AVAILABLE
CVE-2024-6468
CVSS 7.8 HIGH 2024-07-11FIX AVAILABLE
CVE-2025-6015
CVSS 6.8 MEDIUM 2025-08-01FIX AVAILABLE
CVE-2025-6014
CVSS 6.8 MEDIUM 2025-08-01FIX AVAILABLE
CVE-2024-2660
CVSS 6.8 MEDIUM 2024-04-04FIX AVAILABLE
CVE-2022-25243
CVSS 6.5 MEDIUM 2022-03-07FIX AVAILABLE
CVE-2025-6004
CVSS 5.3 MEDIUM 2025-08-01FIX AVAILABLE
CVE-2026-5051
CVSS 4.4 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2025-6011
CVSS 3.7 LOW 2025-08-01FIX AVAILABLE