Tag: CVE-2026-16498

Critical CVEs

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation have released patches for 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and…

CISA KEV Coinspect credential reuse Cross-Tenant

August 5, 2026

Critical CVEs

CVE-2026-16498: Critical Cross-Tenant Credential Reuse in Terraform MCP Server

CVE-2026-16498 is a maximum-severity (CVSS 10.0) cross-tenant credential-reuse vulnerability in HashiCorp's Terraform MCP Server when running in stateless Streamable HTTP mode. The…

Cross-Tenant CVE-2026-16498 CVSS 10.0 HashiCorp

August 5, 2026