Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-75034Rancher: SAML Assertion Replay
- CVE-2026-75033Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
- CVE-2026-71404Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole
- CVE-2026-71403Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind
- CVE-2026-25706yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)
- CVE-2026-59681yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join
- CVE-2026-59680yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute
- CVE-2026-71402wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length
- CVE-2026-71401wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read
- CVE-2026-44945Cross-Cluster Impersonation Confused-Deputy Privilege Escalation
- CVE-2026-25703Potential information leakage from manager /network/graph API in NeuVector
- CVE-2026-55998Cluster Existence Oracle via Unauthenticated Import Endpoint
- CVE-2026-59675Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service
- CVE-2026-55996Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent
- CVE-2025-8412VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
- CVE-2026-59674LPE from suricata user to root due to chown in %post in suricata packaging
- CVE-2026-44938Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
- CVE-2026-44937SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
- CVE-2026-44936Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
- CVE-2026-44934Exposed tokens in SUSE Rancher AI Agent logs
- CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
- CVE-2026-44941libzypp path traversal via "keyhint" in repomd.xml
- CVE-2026-44948Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
- CVE-2026-44949Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook
- CVE-2026-44947Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher
- CVE-2026-44946SAML Authentication Replay in Rancher
- CVE-2026-41053Over-inclusive team membership expansion in GitHub App authentication provider for Rancher
- CVE-2026-41052Rancher Privilege Escalation from Project Owner to Host
- CVE-2026-25707Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
- CVE-2026-44939Command injection through unsanitized YAML parameter in Rancher