AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-19113

MEDIUM · CVSS 5.3 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Consul Community Edition and Consul Enterprise versions 1.3.0 through 2.0.2 are susceptible to an unauthenticated denial of service attack via multiple agent HTTP API endpoints, allowing remote attackers to exhaust memory resources. This could lead to service disruptions, impacting availability for users. Organizations utilizing these versions should prioritize upgrading to the patched releases to mitigate potential service interruptions.

CVE
CVE-2026-19113
Severity
MEDIUM
CVSS
5.3
EPSS
0.29%

Original NVD Description

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, is fixed in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3.