Skip to content
Suse vulnerabilities
Products
Show 160 moreShow less
Newest
-
kubernetes ingress-nginx, suse rancher prime rke2 ingress-nginx +1 more
ingress-nginx mirror-target self-DOS
CVE-2026-116472
2.7 Low
-
suse rancher
Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
CVE-2026-88811
9.1 Critical
-
suse rancher
Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
CVE-2026-88810
7.2 High
-
suse rancher
Rancher meta proxy allowlist bypass leading to server-side request forgery
CVE-2026-88809
7.6 High
-
suse rancher
Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
CVE-2026-94290
9.1 Critical
-
suse rancher
Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster
CVE-2026-104623
Public exploit
6.3 Medium
-
suse rancher
Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace
CVE-2026-104615
7.9 High
-
opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more
sdbootutil: world-readable debug log
CVE-2026-104618
6.9 Medium
-
opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more
sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline
CVE-2026-104617
Fix available
5.9 Medium
-
suse rancher
Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
CVE-2026-88804
Public exploit
9.6 Critical
-
suse rancher
Session Not Revoked Server-Side on Logout in Rancher
CVE-2026-88805
8.1 High
-
suse rancher, rancher fleet +1 more
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
CVE-2026-88808
8.8 High
-
suse rancher, rancher fleet +1 more
Fleet applies namespace labels and annotations without the bundle's service account privileges
CVE-2026-93540
6.5 Medium
-
suse rancher, rancher fleet +1 more
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
CVE-2026-93539
5.4 Medium
-
suse rancher, rancher fleet +1 more
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
CVE-2026-93538
7.1 High
-
suse rancher, rancher fleet +1 more
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
CVE-2026-93537
6.5 Medium
-
suse neuvector
OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
CVE-2026-78424
8.8 High
-
go github.com/neuvector/neuvector
Admission Control Bypass via Hardcoded Sidecar Image Exemption
CVE-2026-78427
5.3 Medium
-
go github.com/neuvector/neuvector
SAML Audience Confusion Allows Cross-SP Authentication
CVE-2026-78425
7.6 High
-
suse neuvector
Logout bypass via alternate JWT spelling
CVE-2026-78426
2.0 Low
-
suse neuvector
Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
CVE-2026-78428
8.8 High
-
suse observability
Service token exposure and potential privilege escalation in SUSE Observability
CVE-2026-44940
5.7 Medium
-
suse neuvector
Sensitive information is leaked into NeuVector’s manager container logs
CVE-2025-46808
6.8 Medium
-
fleetdm fleet, suse rancher fleet +1 more
Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
CVE-2026-75036
5.3 Medium
-
suse rancher
Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass
CVE-2026-75035
7.1 High
-
suse rancher
Rancher: SAML Assertion Replay
CVE-2026-75034
7.4 High
-
suse rancher
Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
CVE-2026-75033
7.7 High
-
suse rancher
Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole
CVE-2026-71404
8.7 High
-
suse rancher
Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind
CVE-2026-71403
6.1 Medium
-
suse yast2-users
yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute
CVE-2026-59680
Fix available
8.6 High
-
suse yast2-auth-client
yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join
CVE-2026-59681
Fix available
8.7 High
-
suse yast2-samba-client
yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)
CVE-2026-25706
Fix available
7.5 High
-
suse wicked
wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length
CVE-2026-71402
Fix available
5.3 Medium
-
suse wicked
wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read
CVE-2026-71401
Fix available
5.3 Medium
-
libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more
fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2
CVE-2026-59679
Fix available
9.2 Critical
-
libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
CVE-2026-44950
Fix available
9.5 Critical
-
suse rancher
Cross-Cluster Impersonation Confused-Deputy Privilege Escalation
CVE-2026-44945
9.1 Critical
-
suse neuvector
Potential information leakage from manager /network/graph API in NeuVector
CVE-2026-25703
7.3 High
-
rancher
Long-lived Rancher registration token exposed in plaintext
CVE-2026-55997
8.8 High
-
suse rancher
Cluster Existence Oracle via Unauthenticated Import Endpoint
CVE-2026-55998
5.3 Medium
-
suse rancher
Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service
CVE-2026-59675
7.5 High
-
suse rancher
Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent
CVE-2026-55996
4.3 Medium
-
suse virtual machine driver pack
VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
CVE-2025-8412
2.0 Low
-
suse opensuse tumbleweed
LPE from suricata user to root due to chown in %post in suricata packaging
CVE-2026-59674
Fix available
7.1 High
-
suse rancher
Exposed tokens in SUSE Rancher AI Agent logs
CVE-2026-44934
7.0 High
-
suse rancher, rancher fleet +1 more
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
CVE-2026-44935
Fix available
9.9 Critical
-
suse rancher, rancher fleet +1 more
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
CVE-2026-44936
Fix available
5.0 Medium
-
suse rancher, rancher fleet +1 more
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
CVE-2026-44937
Fix available
8.3 High
-
suse rancher, rancher fleet +1 more
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
CVE-2026-44938
Fix available
8.8 High
-
suse rancher, rancher fleet +1 more
Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
CVE-2026-44948
5.3 Medium
- Show olderLoading…