Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44942libzypp .repo files can have an optional path which can lead to path traversal attacks
- CVE-2025-71261Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOS
- CVE-2026-44932indirect remote shell command injection via unsanitized DHCP options in wicked
- CVE-2026-41054Missing exit out of permission check in haveged could lead to root exploit
- CVE-2026-44933Path Traversal in Plugin Loading in libzypp
- CVE-2026-41051csync2 uses insecure temporary directories when compiled with C99 or later
- CVE-2026-41050Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
- CVE-2026-25705Rancher Extensions have arbitrary file access via path traversal
- CVE-2026-25702nftables disabled due to incorrect kernel backport
- CVE-2025-62879Rancher Backup Operator pod's logs leak S3 tokens
- CVE-2025-62878Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
- CVE-2025-67601Rancher CLI skips TLS verification on Rancher CLI login command
- CVE-2025-67860NeuVector scanner insecurely handles passwords as command arguments
- CVE-2025-62877Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
- CVE-2025-66001NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
- CVE-2025-62875Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
- CVE-2025-62876A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affe
- CVE-2025-53883spacewalk-java has various XSS issues on search page
- CVE-2025-53880susemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal
- CVE-2025-54471NeuVector is shipping cryptographic material into its binary
- CVE-2025-54469NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
- CVE-2025-54470NeuVector telemetry sender is vulnerable to MITM and DoS
- CVE-2024-58269Rancher exposes sensitive information through audit logs
- CVE-2023-32199Rancher user retains access to clusters despite Global Role removal
- CVE-2024-58260Rancher update on users can deny the service to the admin
- CVE-2024-58267Rancher CLI SAML authentication is vulnerable to phishing attacks
- CVE-2025-54468Rancher sends sensitive information to external services through the `/meta/proxy` endpoint
- CVE-2025-8077NeuVector admin account has insecure default password
- CVE-2025-54467NeuVector process with sensitive arguments lead to leakage
- CVE-2025-53884NeuVector has an insecure password storage vulnerable to rainbow attack