<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: hashicorp-vault-enterprise</title><description>Every new CVE for hashicorp-vault-enterprise.</description><link>https://agentprime.io/</link><item><title>CVE-2026-89322: Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions</title><link>https://agentprime.io/advisories/CVE-2026-89322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89322/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 22:01:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105820: Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution</title><link>https://agentprime.io/advisories/CVE-2026-105820/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105820/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 21:48:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105816: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots</title><link>https://agentprime.io/advisories/CVE-2026-105816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105816/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 21:37:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105818: Vault PKI ACME Issues Certificate With Unvalidated SANs</title><link>https://agentprime.io/advisories/CVE-2026-105818/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105818/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 21:21:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5006: Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths</title><link>https://agentprime.io/advisories/CVE-2026-5006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5006/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 20:32:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14886: Vault Enterprise vulnerable to cross-namespace entity deletion</title><link>https://agentprime.io/advisories/CVE-2026-14886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14886/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 18:57:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12624: Vault vulnerable to LIST authorization bypass via trailing-slash strip</title><link>https://agentprime.io/advisories/CVE-2026-12624/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12624/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 17:00:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5051: Audit Log Plugin Directory Guard Bypass via Legacy path Option</title><link>https://agentprime.io/advisories/CVE-2026-5051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5051/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 17:10:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2877: Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node</title><link>https://agentprime.io/advisories/CVE-2024-2877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2877/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Apr 2024 14:58:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3775: Vault Enterprise&apos;s Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service</title><link>https://agentprime.io/advisories/CVE-2023-3775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3775/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 Sep 2023 23:17:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-3774: Vault Enterprise Namespace Creation May Lead to Denial of Service</title><link>https://agentprime.io/advisories/CVE-2023-3774/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-3774/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jul 2023 00:45:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-2197: Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM</title><link>https://agentprime.io/advisories/CVE-2023-2197/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-2197/</guid><description>CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 May 2023 19:41:17 GMT</pubDate><category>CVE</category></item></channel></rss>