HashiCorp

Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0

Terraform MCP Server flaw CVE-2026-16498 cross-tenant credential reuse rated CVSS 10.0

Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0

Do Son August 4, 2026

TL;DR HashiCorp patched three bugs in its Terraform MCP Server. The worst Terraform MCP Server flaw, CVE-2026-16498,...

IBM Completes Acquisition of HashiCorp, Ushering in New Era of Hybrid Cloud Automation IBM CCA Vulnerability CVE-2025-13375 IBM Anthropic Partnership, AI Software Development watsonx Orchestrate, SQL injection CVE-2024-49803 - CVE-2024-41787 IBM Completes Acquisition HashiCorp

IBM CCA Vulnerability CVE-2025-13375 IBM Anthropic Partnership, AI Software Development watsonx Orchestrate, SQL injection CVE-2024-49803 - CVE-2024-41787 IBM Completes Acquisition HashiCorp

IBM Completes Acquisition of HashiCorp, Ushering in New Era of Hybrid Cloud Automation

Do Son February 28, 2025

IBM announced the finalization of its acquisition of HashiCorp, a leading provider of cloud infrastructure automation software....

IBM’s HashiCorp Acquisition Under Scrutiny: CMA Investigates Competition Concerns CVE-2024-41779 - CVE-2025-0159 IBM HashiCorp Acquisition

CVE-2024-41779 - CVE-2025-0159 IBM HashiCorp Acquisition

IBM’s HashiCorp Acquisition Under Scrutiny: CMA Investigates Competition Concerns

Do Son December 30, 2024

The United Kingdom’s Competition and Markets Authority (CMA) recently announced that it would launch an investigation into...

IBM Acquires HashiCorp in $6.4B Deal IBM acquire HashiCorp

IBM acquire HashiCorp

IBM Acquires HashiCorp in $6.4B Deal

Do Son April 30, 2024

IBM has announced its definitive agreement to acquire HashiCorp Inc., a leader in multi-cloud infrastructure automation, for...

HashiCorp Patches Critical CVE-2024-3817 Vulnerability in go-getter Library

CVE-2024-3817

HashiCorp Patches Critical CVE-2024-3817 Vulnerability in go-getter Library

Do Son April 17, 2024

HashiCorp has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-3817) within its widely used go-getter...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-59309CVSS 9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-65400CVSS 9.8
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-15826CVSS 9.8
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-63077CVSS 9.8
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CISA KEV📅 Added to KEV: Aug 5, 2026
CVE-2026-34486CVSS 7.5
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of...
CISA KEV📅 Added to KEV: Aug 4, 2026