Vendor
SUSE
- CVEs tracked · all time
- 11
- in CISA KEV · all time
- 0
- article · since 11 Sep
- 1
- articles · all time
- 7
One article in the last 45 daysThe latest: SecurityOnline, Thu 24 Sep, 03:36 UTC.See the full timeline
Products: OpenSUSE shim, Rancher
CVEs
11 CVEsCVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in RancherCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm DeployerCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-44938Fleet has PSS Bypass through addLabelsFromOptions in Fleet AgentCVSS8.8High–Not in KEV0.4%EPSS1article
CVE-2026-44937SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL ComponentsCVSS8.3High–Not in KEV0.4%EPSS1article
CVE-2026-44936Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yamlCVSS5.0Medium–Not in KEV0.3%EPSS1article
CVE-2026-44939Command injection through unsanitized YAML parameter in RancherCVSS9.4Critical–Not in KEV1.3%EPSS1article
CVE-2026-41052Rancher Privilege Escalation from Project Owner to HostCVSS9.4Critical–Not in KEV0.4%EPSS1article
CVE-2026-41053Over-inclusive team membership expansion in GitHub App authentication provider for RancherCVSS8.8High–Not in KEV0.5%EPSS1article
CVE-2025-62878Local Path Provisioner vulnerable to Path Traversal via parameters.pathPatternCVSSUnrated–Not in KEV0.6%EPSS1article
CVE-2025-67601Rancher CLI skips TLS verification on Rancher CLI login commandCVSSUnrated–Not in KEV0.2%EPSS1article
- Critical Flaws Put VeloCloud, BIG-IP and Rancher Systems at RiskSecurityOnline
- Critical Rancher Flaw Lets Users Hijack Kubernetes ClustersSecurityOnline
- ESET warns outdated Microsoft UEFI shims can bypass Secure BootSecurityWeek
- Fleet GitOps flaws expose secrets, enable attacks across clustersSecurityOnline
- Rancher CVE-2026-44939 lets attackers hijack Kubernetes clustersSecurityOnline
- CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path ProvisionerSecurityOnline
- Silent Leak: High-Severity Rancher CLI Flaw Exposes Admin CredentialsSecurityOnline · first in our coverage