Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- suse rancherUnauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhookCVE-2026-449497.0 High
- suse rancherStale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in RancherCVE-2026-449476.9 Medium
- suse rancherSAML Authentication Replay in RancherCVE-2026-449469.5 Critical
- suse rancherOver-inclusive team membership expansion in GitHub App authentication provider for RancherCVE-2026-41053Fix available8.8 High
- suse rancherRancher Privilege Escalation from Project Owner to HostCVE-2026-41052Fix available9.4 Critical
- suse rancherCommand injection through unsanitized YAML parameter in RancherCVE-2026-44939Fix available9.4 Critical
- suse wickedindirect remote shell command injection via unsanitized DHCP options in wickedCVE-2026-44932Fix available8.8 High
- suse libzypplibzypp .repo files can have an optional path which can lead to path traversal attacksCVE-2026-44942Fix available6.5 Medium
- opensuse libzypplibzypp path traversal via "keyhint" in repomd.xmlCVE-2026-44941Fix available8.4 High
- opensuse libzyppHandcrafted repo metadata may cause arbitrary local files to be overwritten by libzyppCVE-2026-25707Fix available8.8 High
- suse opensuse, linux enterprise +1 morePath Traversal in Plugin Loading in libzyppCVE-2026-44933Fix available8.5 High
- suse container suse/sle-micro-rancher/5.3:latest, container suse/sle-micro-rancher/5.4:latest, container suse/sle-micro/5.5:latest +31 more +33 moreMissing exit out of permission check in haveged could lead to root exploitCVE-2026-41054Fix available7.8 High
- microsoft local-path-provisioner, suse local path provisioner +1 moreLocal Path Provisioner: HelperPod Template InjectionCVE-2026-44543Fix available8.7 High
- suse rancher, rancher fleet +1 moreHelm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template renderingCVE-2026-41050Fix available9.9 Critical
- suse rancherRancher Extensions have arbitrary file access via path traversalCVE-2026-25705Fix available8.4 High
- suse harvesterHarvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOSCVE-2025-71261Fix available8.6 High
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 morecrypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431In KEVPublic exploitFix availableEPSS 98.1%7.8 High
- suse opensuse tumbleweedcsync2 uses insecure temporary directories when compiled with C99 or laterCVE-2026-41051Fix available5.1 Medium
- suse linux enterprise servernftables disabled due to incorrect kernel backportCVE-2026-25702Fix available7.3 High
- suse rancher, rancher backup and restore operator +1 moreRancher Backup Operator pod's logs leak S3 tokensCVE-2025-62879Fix available6.8 Medium
- suse harvesterNeuVector scanner insecurely handles passwords as command argumentsCVE-2025-67860Fix available3.8 Low
- suse rancherLocal Path Provisioner vulnerable to Path Traversal via parameters.pathPatternCVE-2025-62878Public exploitFix available9.9 Critical
- suse rancherRancher CLI skips TLS verification on Rancher CLI login commandCVE-2025-67601Fix available8.3 High
- suse harvesterHarvest may expose OS default ssh login password via SUSE Virtualization Interactive InstallerCVE-2025-628779.8 Critical
- suse neuvectorNeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)CVE-2025-66001Fix available8.8 High
- suse opensuseA Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation...CVE-2025-62876Fix available5.3 Medium
- opensmtpd, opensuse tumbleweed, suse opensuse tumbleweed +2 moreLocal DoS in OpenSMTPD via UNIX domain socket smtpd.sockCVE-2025-62875Fix available6.9 Medium
- suse container suse/manager/4.3/proxy-httpd:latest, container suse/manager/5.0/x86 64/proxy-httpd:latest, container suse/multi-linux-manager/5.1/x86 64/proxy-httpd:latest +1 more +3 moresusemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversalCVE-2025-538808.7 High
- suse manager server lts 4.3, container suse manager 5.0 +1 morespacewalk-java has various XSS issues on search pageCVE-2025-53883Fix available9.3 Critical
- suse rancherRancher exposes sensitive information through audit logsCVE-2024-58269Fix available4.3 Medium
- suse rancherRancher user retains access to clusters despite Global Role removalCVE-2023-32199Fix available4.3 Medium
- suse neuvectorNeuVector is shipping cryptographic material into its binaryCVE-2025-54471Fix available6.5 Medium
- suse neuvectorNeuVector telemetry sender is vulnerable to MITM and DoSCVE-2025-54470Fix available8.6 High
- suse neuvectorNeuVector Enforcer is vulnerable to Command Injection and Buffer overflowCVE-2025-54469Fix available9.9 Critical
- suse rancherRancher update on users can deny the service to the adminCVE-2024-58260Fix available7.6 High
- suse rancherRancher CLI SAML authentication is vulnerable to phishing attacksCVE-2024-58267Fix available8.0 High
- suse rancherRancher sends sensitive information to external services through the `/meta/proxy` endpointCVE-2025-54468Fix available4.7 Medium
- suse rancherRancher Fleet Helm Values are stored inside BundleDeployment in plain textCVE-2024-52284Fix available7.7 High
- suse rancherRancher affected by unauthenticated Denial of ServiceCVE-2024-58259Fix available8.2 High
- suse neuvectorNeuVector admin account has insecure default passwordCVE-2025-8077Fix available9.8 Critical
- suse neuvectorNeuVector process with sensitive arguments lead to leakageCVE-2025-54467Fix available5.3 Medium
- suse neuvectorNeuVector has an insecure password storage vulnerable to rainbow attackCVE-2025-53884Fix available5.3 Medium
- suse image sles15-sp4-manager-server-4-3-byos, image sles15-sp4-manager-server-4-3-byos-azure, image sles15-sp4-manager-server-4-3-byos-ec2 +3 more +5 moreSUSE Multi Linux Manager allows code execution via unprotected websocket endpointCVE-2025-46811Public exploitEPSS 13.6%9.3 Critical
- suse container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1, image sles15-sp4-manager-proxy-4-3-byos, image sles15-sp4-manager-proxy-4-3-byos-azure +10 more +12 moreMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logsCVE-2025-468096.9 Medium
- suse opensuse tumbleweedThe logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceessCVE-2025-53882Fix available4.8 Medium
- sudo, canonical ubuntu linux, debian linux +5 more +7 moreSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...CVE-2025-32463In KEVPublic exploitFix availableEPSS 56.3%9.3 Critical
- suse pam-config, red hat enterprise linux 7, enterprise linux 8 +1 more +3 morePam-config: lpe from unprivileged to allow_active in pamCVE-2025-6018Public exploitFix available7.8 High
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in spacewalk-javaCVE-2025-233935.6 Medium
- suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 moreTemporary chown() of users' TTY to mode 0666 allows PTY hijacking in screenCVE-2025-46802Fix available5.3 Medium
- suse opensuse tumbleweeddaily-backup.sh script in cyrus-imapd allows escalation from cyrus to rootCVE-2025-23394Fix available9.8 Critical
- Show moreLoading…