CVE-2026-5052

HighCVSS 8.6/10Last modified Oct 26, 2026

Description

Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-918

Affected software

VendorProductVersions
HashiCorpVault>= 1.15.0, < 2.0.0
HashiCorpVault Enterprise>= 1.15.0, < 2.0.0

References

Timeline

Published
Apr 17, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-505208.4Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker toCVE-2026-505218.3Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.CVE-2026-505229.8Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.CVE-2026-505237.8Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker toCVE-2026-505247.5Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-505257.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-505265.5Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.CVE-2026-505277.5Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-505288.2Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-505298.7DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates andCVE-2026-50537.1NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitraryCVE-2026-505307.1DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sce
CVE-2026-5052: High severity, CVSS 8.6 | Vulnix