SUSE product

Rancher

← All SUSE products

No Rancher CVE is in the CISA KEV catalogue.

Tracked since 4 Feb · latest article Thu 24 Sep · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CSV download

No Rancher CVE is in the CISA KEV catalogue.

Coverage

6 articles · all timeFull timeline →

6 articles from 1 outlet since 4 Feb; the latest 32 days ago.

Article
First report

Show as table

Rancher: articles
Published (UTC)	Outlet	Headline
Thu 24 Sep · 03:36 UTC	SecurityOnline	Critical Flaws Put VeloCloud, BIG-IP and Rancher Systems at Risk
Tue 11 Aug · 02:11 UTC	SecurityOnline	Critical Rancher Flaw Lets Users Hijack Kubernetes Clusters
Tue 2 Jun · 03:41 UTC	SecurityOnline	Fleet GitOps flaws expose secrets, enable attacks across clusters
Tue 2 Jun · 02:32 UTC	SecurityOnline	Rancher CVE-2026-44939 lets attackers hijack Kubernetes clusters
Mon 9 Feb · 00:40 UTC	SecurityOnline	CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
Wed 4 Feb · 02:10 UTC	SecurityOnline	Silent Leak: High-Severity Rancher CLI Flaw Exposes Admin Credentials

See the full timeline

24 SepCritical Flaws Put VeloCloud, BIG-IP and Rancher Systems at RiskSecurityOnline
11 AugCritical Rancher Flaw Lets Users Hijack Kubernetes ClustersSecurityOnline
2 JunFleet GitOps flaws expose secrets, enable attacks across clustersSecurityOnline
2 JunRancher CVE-2026-44939 lets attackers hijack Kubernetes clustersSecurityOnline
9 FebCVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path ProvisionerSecurityOnline
4 FebSilent Leak: High-Severity Rancher CLI Flaw Exposes Admin CredentialsSecurityOnline

All CVEs in coverage

CVE-2026-44939Command injection through unsanitized YAML parameter in RancherCVSS9.4Critical–Not in KEV1.3%EPSS1article

CVE-2025-62878Local Path Provisioner vulnerable to Path Traversal via parameters.pathPatternCVSSUnrated–Not in KEV0.6%EPSS1article

CVE-2026-44945SUSE Rancher vulnerabilityCVSS9.1Critical–Not in KEV0.6%EPSS1article

CVE-2026-41053Over-inclusive team membership expansion in GitHub App authentication provider for RancherCVSS8.8High–Not in KEV0.5%EPSS1article

CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm DeployerCVSS9.9Critical–Not in KEV0.5%EPSS1article

CVE-2026-44938Fleet has PSS Bypass through addLabelsFromOptions in Fleet AgentCVSS8.8High–Not in KEV0.4%EPSS1article

CVE-2026-44937SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL ComponentsCVSS8.3High–Not in KEV0.4%EPSS1article

CVE-2026-41052Rancher Privilege Escalation from Project Owner to HostCVSS9.4Critical–Not in KEV0.4%EPSS1article

CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in RancherCVSS9.6Critical–Not in KEV0.3%EPSS1article

CVE-2026-44936Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yamlCVSS5.0Medium–Not in KEV0.3%EPSS1article

CVE-2025-67601Rancher CLI skips TLS verification on Rancher CLI login commandCVSSUnrated–Not in KEV0.2%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Rancher

Exploited, by due date

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts