Vulnerabilities of SUSE Rancher
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-88811 | Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… | 9.1 Critical | Nov 2, 2026 |
| CVE-2026-88810 | A privilege escalation issue was discovered in Rancher Manager's role-based access control | 7.2 High | Nov 2, 2026 |
| CVE-2026-88809 | A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) | 7.6 High | Nov 2, 2026 |
| CVE-2026-94290 | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… | 9.1 Critical | Nov 2, 2026 |
| CVE-2026-104623 | A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE… | 6.3 Medium | Oct 30, 2026 |
| CVE-2026-104615 | A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before… | 7.9 High | Oct 30, 2026 |
| CVE-2024-22031 | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain… | 8.5 High | Oct 15, 2026 |
| CVE-2026-88804 | An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site… | 9.6 Critical | Sep 28, 2026 |
| CVE-2026-88805 | Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the… | 8.1 High | Sep 28, 2026 |
| CVE-2026-88808 | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream… | 8.8 High | Sep 28, 2026 |
| CVE-2026-93540 | A privilege mismatch was found in Fleet | 6.5 Medium | Sep 28, 2026 |
| CVE-2026-93539 | A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service) | 5.4 Medium | Sep 28, 2026 |
| CVE-2026-93538 | A cross-tenant authorization issue was discovered in SUSE Rancher Fleet | 7.1 High | Sep 28, 2026 |
| CVE-2026-93537 | A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push… | 6.5 Medium | Sep 28, 2026 |
| CVE-2026-75035 | A flaw was found in Rancher Manager | 7.7 High | Sep 3, 2026 |
| CVE-2026-75034 | Rancher: SAML Assertion Replay | 7.4 High | Sep 3, 2026 |
| CVE-2026-75033 | A flaw was found in Rancher Manager | 7.7 High | Sep 3, 2026 |
| CVE-2026-71404 | A flaw was found in Rancher Manager | 8.7 High | Sep 3, 2026 |
| CVE-2026-71403 | A flaw was found in Rancher Manager | 6.1 Medium | Sep 3, 2026 |
| CVE-2026-44945 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go) | 9.1 Critical | Aug 5, 2026 |
| CVE-2026-55998 | The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token | 5.3 Medium | Aug 5, 2026 |
| CVE-2026-59675 | When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a… | 7.5 High | Aug 5, 2026 |
| CVE-2026-55996 | A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher | 4.3 Medium | Aug 5, 2026 |
| CVE-2026-44938 | A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from… | 8.8 High | Jul 7, 2026 |
| CVE-2026-44937 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2,… | 8.3 High | Jul 6, 2026 |
Other SUSE products
neuvector 14
openSUSE Tumbleweed 13
SUSE Linux Enterprise Server 15 13
SUSE Linux Enterprise Server 12 12
SUSE Linux Enterprise Server for SAP 15 8
libzypp 7
SUSE Linux Enterprise Server 15-LTSS 7
SUSE Manager Server Module 4.3 7
SUSE Linux Enterprise Server for SAP Applications 15 SP6 6
supportutils 5
openSUSE Factory 5
SUSE Linux Enterprise Server for SAP Applications 15 SP5 5