Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116472ingress-nginx mirror-target self-DOS
- CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
- CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
- CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgery
- CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
- CVE-2026-104623Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster
- CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace
- CVE-2026-104618sdbootutil: world-readable debug log
- CVE-2026-104617sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline
- CVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
- CVE-2024-22031Rancher users who can create Projects can gain access to arbitrary projects
- CVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH
- CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
- CVE-2026-88805Session Not Revoked Server-Side on Logout in Rancher
- CVE-2026-88808Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
- CVE-2026-93540Fleet applies namespace labels and annotations without the bundle's service account privileges
- CVE-2026-93539Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
- CVE-2026-93538Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
- CVE-2026-93537Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
- CVE-2026-78424OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
- CVE-2026-78427Admission Control Bypass via Hardcoded Sidecar Image Exemption
- CVE-2026-78425SAML Audience Confusion Allows Cross-SP Authentication
- CVE-2026-78426Logout bypass via alternate JWT spelling
- CVE-2026-78428Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
- CVE-2026-44940Service token exposure and potential privilege escalation in SUSE Observability
- CVE-2026-44950fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
- CVE-2026-59679fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2
- CVE-2025-46808Sensitive information is leaked into NeuVector’s manager container logs
- CVE-2026-75036Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing
- CVE-2026-75035Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass