Vulnérabilités de SUSE Rancher
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-88811 | Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… | 9.1 Critique | 2 nov. 2026 |
| CVE-2026-88810 | A privilege escalation issue was discovered in Rancher Manager's role-based access control | 7.2 Élevée | 2 nov. 2026 |
| CVE-2026-88809 | A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) | 7.6 Élevée | 2 nov. 2026 |
| CVE-2026-94290 | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… | 9.1 Critique | 2 nov. 2026 |
| CVE-2026-104623 | A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE… | 6.3 Moyenne | 30 oct. 2026 |
| CVE-2026-104615 | A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before… | 7.9 Élevée | 30 oct. 2026 |
| CVE-2024-22031 | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain… | 8.5 Élevée | 15 oct. 2026 |
| CVE-2026-88804 | An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site… | 9.6 Critique | 28 sept. 2026 |
| CVE-2026-88805 | Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the… | 8.1 Élevée | 28 sept. 2026 |
| CVE-2026-88808 | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream… | 8.8 Élevée | 28 sept. 2026 |
| CVE-2026-93540 | A privilege mismatch was found in Fleet | 6.5 Moyenne | 28 sept. 2026 |
| CVE-2026-93539 | A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service) | 5.4 Moyenne | 28 sept. 2026 |
| CVE-2026-93538 | A cross-tenant authorization issue was discovered in SUSE Rancher Fleet | 7.1 Élevée | 28 sept. 2026 |
| CVE-2026-93537 | A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push… | 6.5 Moyenne | 28 sept. 2026 |
| CVE-2026-75035 | A flaw was found in Rancher Manager | 7.7 Élevée | 3 sept. 2026 |
| CVE-2026-75034 | Rancher: SAML Assertion Replay | 7.4 Élevée | 3 sept. 2026 |
| CVE-2026-75033 | A flaw was found in Rancher Manager | 7.7 Élevée | 3 sept. 2026 |
| CVE-2026-71404 | A flaw was found in Rancher Manager | 8.7 Élevée | 3 sept. 2026 |
| CVE-2026-71403 | A flaw was found in Rancher Manager | 6.1 Moyenne | 3 sept. 2026 |
| CVE-2026-44945 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go) | 9.1 Critique | 5 août 2026 |
| CVE-2026-55998 | The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token | 5.3 Moyenne | 5 août 2026 |
| CVE-2026-59675 | When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a… | 7.5 Élevée | 5 août 2026 |
| CVE-2026-55996 | A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher | 4.3 Moyenne | 5 août 2026 |
| CVE-2026-44938 | A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from… | 8.8 Élevée | 7 juil. 2026 |
| CVE-2026-44937 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2,… | 8.3 Élevée | 6 juil. 2026 |
Autres produits SUSE
neuvector 14
openSUSE Tumbleweed 13
SUSE Linux Enterprise Server 15 13
SUSE Linux Enterprise Server 12 12
SUSE Linux Enterprise Server for SAP 15 8
libzypp 7
SUSE Linux Enterprise Server 15-LTSS 7
SUSE Manager Server Module 4.3 7
SUSE Linux Enterprise Server for SAP Applications 15 SP6 6
supportutils 5
openSUSE Factory 5
SUSE Linux Enterprise Server for SAP Applications 15 SP5 5