<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 15:08:57 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-6015 — Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-6015</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; HashiCorp Vault, HashiCorp Vault Enterprise&lt;/p&gt;
&lt;p&gt;Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; HashiCorp Vault, HashiCorp Vault Enterprise&lt;/p&gt;
&lt;p&gt;Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-6015</guid>
    </item>
  </channel>
</rss>
