{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-CERTCA-2026-1106","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-30T15:50:11Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"fr","value":"En date du 29 octobre 2026, HashiCorp est touché par des vulnérabilités dans les produits suivants :\nNomad\nVersions antérieures à la version 2.1.0\nNomad Enterprise\nVersions antérieures à la version 2.1.0\nVersions antérieures à la version 1.11.12\nVersions antérieures à la version 1.10.18\nBoundary\nVersions antérieures à la version 1.0.2\nBoundary Enterprise\nVersions antérieures à la version 1.0.2 et 0.21.6\nLe Centre pour la cybersécurité encourage les utilisateurs et les administrateurs à consulter les liens fournis et à installer les mises à jour nécessaires, dès qu'elles sont disponibles.","supportingMedia":null}],"references":[{"url":"https://cyber.gc.ca/fr/alertes-avis/bulletin-securite-hashicorp-av26-1106","name":"","tags":["advisory"]},{"url":"https://discuss.hashicorp.com/t/hcsec-2026-52-nomad-dispatch-payload-writes-can-escape-the-allocation-directory-through-symlinks/77930","name":"","tags":["vendor"]},{"url":"https://discuss.hashicorp.com/t/hcsec-2026-54-boundary-vulnerable-to-server-side-request-forgery-in-vault-credential-store/77932","name":"","tags":["vendor"]},{"url":"https://discuss.hashicorp.com/c/security/52","name":"","tags":["vendor"]},{"url":"https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-1106","name":"","tags":["advisory"]}],"metrics":null,"problemTypes":null,"affected":[{"vendor":"Versions","product":"Versions antérieures à la version 1.0.2 et 0.21.6","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Versions","product":"Versions antérieures à la version 1.11.12","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 1.0.2","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 2.1.0","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 1.0.2 and 0.21.6","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Versions","product":"Versions antérieures à la version 2.1.0","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 1.11.12","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Versions","product":"Versions antérieures à la version 1.0.2","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 1.10.18","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Versions","product":"Versions antérieures à la version 1.10.18","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}