SUSE

Products

Exploited and recent CVEs

• CVE-2026-116472 Low 2.7 ingress-nginx mirror-target self-DOS 0.4%
• CVE-2026-88811 Critical 9.1 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy 0.4%
• CVE-2026-88810 High 7.2 Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules 0.5%
• CVE-2026-88809 High 7.6 Rancher meta proxy allowlist bypass leading to server-side request forgery 0.3%
• CVE-2026-94290 Critical 9.1 Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller 0.5%
• CVE-2026-104623 Medium 6.3 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster 0.3%
• CVE-2026-104615 High 7.9 Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace 0.2%
• CVE-2026-104618 Medium 6.2 sdbootutil: world-readable debug log 0.1%
• CVE-2026-104618 Medium 6.2 sdbootutil: world-readable debug log 0.1%
• CVE-2026-104618 Medium 6.2 sdbootutil: world-readable debug log 0.1%
• CVE-2026-104617 Medium 5.1 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 0.1%
• CVE-2026-104617 Medium 5.1 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 0.1%
• CVE-2026-104617 Medium 5.1 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 0.1%
• CVE-2023-32198 High 8.0 Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks 0.3%
• CVE-2024-22031 High 8.5 Rancher users who can create Projects can gain access to arbitrary projects 0.4%
• CVE-2025-23390 Medium 6.3 Fleet doesn’t validate a server’s certificate when connecting through SSH 0.2%
• CVE-2026-88804 Critical 9.6 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher 1.0%
• CVE-2026-88805 High 8.1 Session Not Revoked Server-Side on Logout in Rancher 0.2%
• CVE-2026-88808 High 8.8 Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters 0.3%
• CVE-2026-93540 Medium 6.5 Fleet applies namespace labels and annotations without the bundle's service account privileges 0.2%
• CVE-2026-93539 Medium 5.4 Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver 0.2%
• CVE-2026-93538 High 7.1 Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet 0.2%
• CVE-2026-93537 Medium 6.5 Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory 0.3%
• CVE-2026-78424 High 8.8 OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes 0.2%
• CVE-2026-78427 Medium 5.3 Admission Control Bypass via Hardcoded Sidecar Image Exemption 0.2%
• CVE-2026-78425 High 7.6 SAML Audience Confusion Allows Cross-SP Authentication 0.4%
• CVE-2026-78426 Low 2.0 Logout bypass via alternate JWT spelling 0.2%
• CVE-2026-78428 High 8.8 Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently 0.3%
• CVE-2026-44940 Medium 5.7 Service token exposure and potential privilege escalation in SUSE Observability 0.2%
• CVE-2026-44950 Critical 9.0 fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 0.3%