OpenSUSE Tumbleweed

• CVE-2026-104618 Medium 6.2 sdbootutil: world-readable debug log 0.1%
• CVE-2026-104617 Medium 5.1 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline 0.1%
• CVE-2025-53881 Medium 6.9 SUSE-specific logrotate configuration allows escalation from mail user/group to root 0.2%
• CVE-2025-46810 High 8.5 A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.2 0.2%
• CVE-2024-49505 Medium 5.3 XSS vulnerability found in OpenSuse MirrorCache 0.4%
• CVE-2024-49506 High 7.3 Fixed temporary file path in aeon-checks allows fixing of disk encryption key <0.1%
• CVE-2023-32183 High 7.8 Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed. 0.2%
• CVE-2022-31250 High 7.1 keylime %post scriplet allows for privilege escalation from keylime user to root 0.3%
• CVE-2021-25315 Critical 9.8 salt-api unauthenticated remote code execution 2.3%