Rancher
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Rancher | 4 | – | Aug 5, 2026 |
| local-path-provisioner | 1 | – | May 28, 2026 |
| SUSE Linux Enterprise Server 15 | 1 | – | Jul 15, 2021 |
Exploited and recent CVEs
- CVE-2026-55997 Long-lived Rancher registration token exposed in plaintext 0.1%
- CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection 0.4%
- CVE-2021-31999 Rancher: Privilege escalation vulnerability via malicious Connection header 1.1%
- CVE-2021-31999 Rancher: Privilege escalation vulnerability via malicious Connection header 1.1%
- CVE-2021-25320 Rancher: Cloud credentials can be used through proxy API by users without access 0.9%
- CVE-2021-25318 rancher: API group not properly specified when creating Kubernetes RBAC resources 1.1%