VulnSocial

CVE-2026-87090Patch

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node name may exploit this issue if they can obtain the node ID of a node they do not control. This vulnerability (CVE-2026-87090) is fixed in Consul 2.0.4 and Consul Enterprise 1.21.18, 1.22.12 and 2.0.4.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-14: 1Patch / Workaround · 2026-09-14: 1Technical Details · 2026-09-14: 109-14
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CCB Alert@CCBalert
    Patch

    Warning: 3 High severity flaws in #HashiCorp #Consul & #ConsulTemplate! CVE-2026-87090, CVE-2026-87993 & CVE-2026-88021 CVSS(3.1): 8.3, 7.7, 7.5. Node identity takeover, Vault secret exposure & service mesh auth bypass. Patch now! https://discuss.hashicorp.com/c/security/52 #Patch #Patch #Patch

    Post summary

    The tweet discloses three high-severity HashiCorp Consul/ConsulTemplate CVEs with CVSS scores and technical impact details, and urges immediate patching via a link to HashiCorp's security discussion.

    01001313
    7.2K followersView on X

Explore more

Back to dashboard