Tag: CVE-2026-14869

Critical CVEs

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation have released patches for 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and…

CISA KEV Coinspect credential reuse Cross-Tenant

August 5, 2026

Critical CVEs

CVE-2026-14869: Server-Side Request Forgery in Terraform MCP Server

CVE-2026-14869 (CVSS 8.6) is a server-side request forgery vulnerability in Terraform MCP Server's Streamable HTTP transport. Request middleware rejects a client-supplied Terraform…

CVE-2026-14869 HashiCorp SSRF Terraform MCP Server

August 5, 2026