Suse - vulnerabilities (CVEs)

1324 CVEs in 383 products, 13 in the last 30 days, newest from 2026-10-15.

Products

Linux Enterprise Server - 476 CVEs
Linux Enterprise Desktop - 462 CVEs
Linux Enterprise Software Development Kit - 297 CVEs
Suse Linux - 207 CVEs
Suse Linux Enterprise Server - 129 CVEs
Linux Enterprise Workstation Extension - 105 CVEs
Linux Enterprise - 97 CVEs
Suse Linux Enterprise Desktop - 81 CVEs
Rancher - 73 CVEs
Linux Enterprise Real Time Extension - 57 CVEs
Linux Enterprise Debuginfo - 55 CVEs
Package Hub - 39 CVEs
Suse Linux Enterprise Software Development Kit - 34 CVEs
Linux Enterprise High Availability Extension - 28 CVEs
Studio Onsite - 22 CVEs
Openstack Cloud - 20 CVEs
Linux Enterprise Sdk - 19 CVEs
Manager - 19 CVEs
Suse Linux Workstation Extension - 17 CVEs
Manager Proxy - 16 CVEs
Opensuse Tumbleweed - 13 CVEs
Suse Linux Enterprise Server 15 - 13 CVEs
Manager Server - 12 CVEs
Rancher Fleet - 12 CVEs
Suse Linux Enterprise Server 12 - 12 CVEs
Neuvector - 11 CVEs
Linux Enterprise Point Of Sale - 10 CVEs
Linux Enterprise High Performance Computing - 8 CVEs
Suse Linux Enterprise Server For Sap 15 - 8 CVEs
Caas Platform - 7 CVEs
Libzypp - 7 CVEs
Linux Enterprise Real Time - 7 CVEs
Suse Linux Enterprise Server 15-ltss - 7 CVEs
Suse Manager Server Module 4.3 - 7 CVEs
Linux Enterprise Server For Sap - 6 CVEs
Suse Email Server - 6 CVEs
Suse Linux Connectivity Server - 6 CVEs
Suse Linux Database Server - 6 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp6 - 6 CVEs
Suse Linux Office Server - 6 CVEs
Linux Enterprise Java - 5 CVEs
Open Build Service - 5 CVEs
Opensuse Factory - 5 CVEs
Studio Extension For System Z - 5 CVEs
Supportutils - 5 CVEs
Suse Linux Admin-cd For Firewall - 5 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp5 - 5 CVEs
Suse Linux Enterprise Software Development Kit 12-sp4 - 5 CVEs
Suse Linux Enterprise Software Development Kit 12-sp5 - 5 CVEs
Suse Linux Firewall Cd - 5 CVEs
Suse Manager Server 4.2 - 5 CVEs
Opensuse - 4 CVEs
Opensuse Leap 15.5 - 4 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp4-espos - 4 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp4-ltss - 4 CVEs
Suse Linux Enterprise Server 11 - 4 CVEs
Suse Linux Enterprise Server 11-sp4-ltss - 4 CVEs
Suse Linux Enterprise Server 12-sp5 - 4 CVEs
Suse Linux Enterprise Server 15 Sp4-ltss - 4 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp4 - 4 CVEs
Suse Manager Proxy Lts 4.3 - 4 CVEs
Suse Manager Server 4.0 - 4 CVEs
Suse Openstack Cloud 8 - 4 CVEs
Webyast - 4 CVEs
Enterprise Storage - 3 CVEs
Harvester - 3 CVEs
Kiwi - 3 CVEs
Linux Enterprise Live Patching - 3 CVEs
Linux Enterprise Micro - 3 CVEs
Linux Enterprise Module For Public Cloud - 3 CVEs
Linux Enterprise Server For Raspberry Pi - 3 CVEs
Openstack Cloud Crowbar - 3 CVEs
Subscription Management Tool - 3 CVEs
Suse Linux Enterprise Desktop 15 Sp7 - 3 CVEs
Suse Linux Enterprise High Availability Extension - 3 CVEs
Suse Linux Enterprise High Performance Computing 15-espos - 3 CVEs
Suse Linux Enterprise High Performance Computing 15-ltss - 3 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp5 - 3 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp5-espos - 3 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp5-ltss - 3 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp6 - 3 CVEs
Suse Linux Enterprise Module For Basesystem 15 Sp7 - 3 CVEs
Suse Linux Enterprise Module For Development Tools 15 - 3 CVEs
Suse Linux Enterprise Module For Suse Manager Server 4.2 - 3 CVEs
Suse Linux Enterprise Module For Suse Manager Server 4.3 - 3 CVEs
Suse Linux Enterprise Server 12-sp4 - 3 CVEs
Suse Linux Enterprise Server 15 Sp1 - 3 CVEs
Suse Linux Enterprise Server 15 Sp5-ltss - 3 CVEs
Suse Linux Enterprise Server 15 Sp6 - 3 CVEs
Suse Linux Enterprise Server 15 Sp6-ltss - 3 CVEs
Suse Linux Enterprise Server 15 Sp7 - 3 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp7 - 3 CVEs
Suse Linux Openexchange Server - 3 CVEs
Suse Manager Retail Branch Server Lts 4.3 - 3 CVEs
Suse Manager Server 4.1 - 3 CVEs
Suse Manager Server Lts 4.3 - 3 CVEs
Suse Office Server - 3 CVEs
Suse Open Enterprise Server - 3 CVEs
Suse Openstack Cloud 7 - 3 CVEs
Suse Openstack Cloud Crowbar 8 - 3 CVEs
Suse Openstack Cloud Crowbar 9 - 3 CVEs
Wicked - 3 CVEs
Backports - 2 CVEs
Cloud - 2 CVEs
Container Susekiosktigervnc-x11vnc1.14-63.8 - 2 CVEs
Container Susekioskxorg21.1-83.7 - 2 CVEs
Container Susemanager5.0x86 64server5.0.2.7.8.1 - 2 CVEs
Container Susemanager5.0x86 64server5.0.4.7.19.1 - 2 CVEs
Container Susemanager5.0x86 64server5.0.5.7.30.1 - 2 CVEs
Fleet - 2 CVEs
Github.com Neuvector Neuvector - 2 CVEs
Image Sles-sap-azure - 2 CVEs
Image Sles-sap-azure-3p - 2 CVEs
Image Sles-sap-byos-azure - 2 CVEs
Image Sles-sap-byos-ec2 - 2 CVEs
Image Sles-sap-byos-gce - 2 CVEs
Image Sles-sap-gce - 2 CVEs
Image Sles-sap-gce-3p - 2 CVEs
Image Sles-sapcal-gce - 2 CVEs
Image Sles12-sp5-azure-sap-byos - 2 CVEs
Image Sles12-sp5-azure-sap-on-demand - 2 CVEs
Image Sles12-sp5-ec2-sap-byos - 2 CVEs
Image Sles12-sp5-ec2-sap-on-demand - 2 CVEs
Image Sles12-sp5-gce-sap-byos - 2 CVEs
Image Sles12-sp5-gce-sap-on-demand - 2 CVEs
Image Sles15-sp4-manager-server-4-3-byos - 2 CVEs
Image Sles15-sp4-manager-server-4-3-byos-azure - 2 CVEs
Image Sles15-sp4-manager-server-4-3-byos-ec2 - 2 CVEs
Image Sles15-sp4-manager-server-4-3-byos-gce - 2 CVEs
Image Sles15-sp6-sap - 2 CVEs
Image Sles15-sp6-sap-azure - 2 CVEs
Image Sles15-sp6-sap-azure-3p - 2 CVEs
Image Sles15-sp6-sap-byos - 2 CVEs
Image Sles15-sp6-sap-byos-azure - 2 CVEs
Image Sles15-sp6-sap-byos-ec2 - 2 CVEs
Image Sles15-sp6-sap-byos-gce - 2 CVEs
Image Sles15-sp6-sap-ec2 - 2 CVEs
Image Sles15-sp6-sap-gce - 2 CVEs
Image Sles15-sp6-sap-hardened - 2 CVEs
Image Sles15-sp6-sap-hardened-azure - 2 CVEs
Image Sles15-sp6-sap-hardened-byos - 2 CVEs
Image Sles15-sp6-sap-hardened-byos-azure - 2 CVEs
Image Sles15-sp6-sap-hardened-byos-ec2 - 2 CVEs
Image Sles15-sp6-sap-hardened-byos-gce - 2 CVEs
Image Sles15-sp6-sap-hardened-ec2 - 2 CVEs
Image Sles15-sp6-sap-hardened-gce - 2 CVEs
Image Sles15-sp6-sapcal - 2 CVEs
Image Sles15-sp6-sapcal-azure - 2 CVEs
Image Sles15-sp6-sapcal-ec2 - 2 CVEs
Image Sles15-sp6-sapcal-gce - 2 CVEs
Image Sles15-sp7-sap-azure - 2 CVEs
Image Sles15-sp7-sap-azure-3p - 2 CVEs
Image Sles15-sp7-sap-byos-azure - 2 CVEs
Image Sles15-sp7-sap-byos-ec2 - 2 CVEs
Image Sles15-sp7-sap-byos-gce - 2 CVEs
Image Sles15-sp7-sap-ec2 - 2 CVEs
Image Sles15-sp7-sap-gce - 2 CVEs
Image Sles15-sp7-sap-gce-3p - 2 CVEs
Image Sles15-sp7-sap-hardened-azure - 2 CVEs
Image Sles15-sp7-sap-hardened-byos-azure - 2 CVEs
Image Sles15-sp7-sap-hardened-byos-ec2 - 2 CVEs
Image Sles15-sp7-sap-hardened-byos-gce - 2 CVEs
Image Sles15-sp7-sap-hardened-gce - 2 CVEs
Image Sles15-sp7-sapcal-azure - 2 CVEs
Image Sles15-sp7-sapcal-ec2 - 2 CVEs
Image Sles15-sp7-sapcal-gce - 2 CVEs
Linux - 2 CVEs
Linux Enterprise High Availability - 2 CVEs
Linux Enterprise Module For Legacy - 2 CVEs
Linux Enterprise Module For Web Scripting - 2 CVEs
Longhorn - 2 CVEs
Manager Retail Branch Server - 2 CVEs
Opensuse Leap 15.6 - 2 CVEs
Opensuse Leap 16.0 - 2 CVEs
Opensuse Leap 16.1 - 2 CVEs
Portus - 2 CVEs
Rancher Rke2 - 2 CVEs
Suse Caas Platform 4.5 - 2 CVEs
Suse Enterprise Storage - 2 CVEs
Suse Enterprise Storage 5 - 2 CVEs
Suse Liberty Linux 10 - 2 CVEs
Suse Liberty Linux 8 - 2 CVEs
Suse Liberty Linux 9 - 2 CVEs
Suse Linux Enterprise - 2 CVEs
Suse Linux Enterprise Debuginfo 11-sp3 - 2 CVEs
Suse Linux Enterprise Debuginfo 11-sp4 - 2 CVEs
Suse Linux Enterprise Desktop 15 Sp5 - 2 CVEs
Suse Linux Enterprise Desktop 15 Sp6 - 2 CVEs
Suse Linux Enterprise Micro 5.3 - 2 CVEs
Suse Linux Enterprise Micro 5.4 - 2 CVEs
Suse Linux Enterprise Micro 5.5 - 2 CVEs
Suse Linux Enterprise Module For Desktop Applications 15-sp1 - 2 CVEs
Suse Linux Enterprise Module For Development Tools 15-sp1 - 2 CVEs
Suse Linux Enterprise Module For Open Buildservice Development Tools 15 - 2 CVEs
Suse Linux Enterprise Point Of Sale 11-sp3 - 2 CVEs
Suse Linux Enterprise Server 12-sp2-bcl - 2 CVEs
Suse Linux Enterprise Server 12-sp2-ltss - 2 CVEs
Suse Linux Enterprise Server 12-sp3-bcl - 2 CVEs
Suse Linux Enterprise Server 12-sp3-ltss - 2 CVEs
Suse Linux Enterprise Server 12 Sp5-ltss - 2 CVEs
Suse Linux Enterprise Server 15 Sp5 - 2 CVEs
Suse Linux Enterprise Server 16.0 - 2 CVEs
Suse Linux Enterprise Server 16.1 - 2 CVEs
Suse Linux Enterprise Server For Nvidia 16.1 - 2 CVEs
Suse Linux Enterprise Server For Sap 12-sp2 - 2 CVEs
Suse Linux Enterprise Server For Sap 12-sp3 - 2 CVEs
Suse Linux Enterprise Server For Sap 12-sp5 - 2 CVEs
Suse Linux Enterprise Server For Sap Applications 16.0 - 2 CVEs
Suse Linux Enterprise Server Ltss Extended Security 12 Sp5 - 2 CVEs
Suse Linux School Server - 2 CVEs
Suse Linux Standard Server - 2 CVEs
Suse Openstack Cloud - 2 CVEs
Susestudio-ui-server - 2 CVEs
Wrangler - 2 CVEs
Apiserver - 1 CVEs
Arpwatch - 1 CVEs
Basesystem Module - 1 CVEs
Build - 1 CVEs
Caas Platform 3.0 - 1 CVEs
Container Suse Manager 5.0 - 1 CVEs
Container Susemanager4.3proxy-httpd4.3.16.9.67.1 - 1 CVEs
Container Susemanager4.3proxy-httpdlatest - 1 CVEs
Container Susemanager5.0x86 64proxy-httpd5.0.5.7.23.1 - 1 CVEs
Container Susemanager5.0x86 64proxy-httpdlatest - 1 CVEs
Container Susemanager5.0x86 64server5.0.0-beta1.2.122 - 1 CVEs
Container Susemulti-linux-manager5.1x86 64proxy-httpdlatest - 1 CVEs
Container Susesle-micro-rancher5.3latest - 1 CVEs
Container Susesle-micro-rancher5.4latest - 1 CVEs
Container Susesle-micro5.5latest - 1 CVEs
Crowbar - 1 CVEs
Cryptctl - 1 CVEs
Cups - 1 CVEs
Development Tools Module - 1 CVEs
Hackweek - 1 CVEs
Hawk2 - 1 CVEs
Image Sles15-sp4-manager-proxy-4-3-byos - 1 CVEs
Image Sles15-sp4-manager-proxy-4-3-byos-azure - 1 CVEs
Image Sles15-sp4-manager-proxy-4-3-byos-ec2 - 1 CVEs
Image Sles15-sp4-manager-proxy-4-3-byos-gce - 1 CVEs
Image Sles15-sp4-sap-byos - 1 CVEs
Image Sles15-sp4-sap-byos-azure - 1 CVEs
Image Sles15-sp4-sap-byos-ec2 - 1 CVEs
Image Sles15-sp4-sap-byos-gce - 1 CVEs
Image Sles15-sp4-sap-hardened - 1 CVEs
Image Sles15-sp4-sap-hardened-byos - 1 CVEs
Image Sles15-sp4-sap-hardened-byos-azure - 1 CVEs
Image Sles15-sp4-sap-hardened-byos-ec2 - 1 CVEs
Image Sles15-sp4-sap-hardened-byos-gce - 1 CVEs
Image Sles15-sp4-sap-hardened-gce - 1 CVEs
Inn - 1 CVEs
K3s - 1 CVEs
Kdump - 1 CVEs
Kernel - 1 CVEs
Keystone-json-assignment - 1 CVEs
Kubewarden - 1 CVEs
Legacy Module - 1 CVEs
Lifecycle Management Server - 1 CVEs
Linux Enterprise For Sap - 1 CVEs
Linux Enterprise Module For Containers - 1 CVEs
Linux Enterprise Module For Sap Applications - 1 CVEs
Linux Enterprise Point Of Service - 1 CVEs
Linux Enterprise Storage - 1 CVEs
Linux Micro - 1 CVEs
Local Path Provisioner - 1 CVEs
Mailman - 1 CVEs
Munin - 1 CVEs
Nextcloud - 1 CVEs
Norman - 1 CVEs
Obs-service-source Validator - 1 CVEs
Obs-service-tar Scm - 1 CVEs
Office Server - 1 CVEs
Open Enterprise Server - 1 CVEs
Openqa - 1 CVEs
Opensuse Leap - 1 CVEs
Opensuse Osc - 1 CVEs
Pam - 1 CVEs
Pam-config - 1 CVEs
Permissions - 1 CVEs
Postgresql-init - 1 CVEs
Public Cloud Module - 1 CVEs
Rancher Backup And Restore Operator - 1 CVEs
Rancher Desktop - 1 CVEs
Rancher K3s - 1 CVEs
Realtime Module - 1 CVEs
Repository Mirroring Tool - 1 CVEs
Rke - 1 CVEs
Rke2 - 1 CVEs
S390-tools - 1 CVEs
Salt-netapi-client - 1 CVEs
Shadow - 1 CVEs
Steve - 1 CVEs
Studio - 1 CVEs
Studio Onsite Appliance - 1 CVEs
Suse Caas Platform 3.0 - 1 CVEs
Suse Cvsup - 1 CVEs
Suse Enterprise Storage 7.1 - 1 CVEs
Suse Iptables - 1 CVEs
Suse Linux Enterprise High Availability 12-sp3 - 1 CVEs
Suse Linux Enterprise High Availability 12-sp5 - 1 CVEs
Suse Linux Enterprise High Availability 15-sp2 - 1 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp2-ltss - 1 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp3-ltss - 1 CVEs
Suse Linux Enterprise High Performance Computing 15 Sp7 - 1 CVEs
Suse Linux Enterprise Live Patching - 1 CVEs
Suse Linux Enterprise Module For Basesystem 15 Sp6 - 1 CVEs
Suse Linux Enterprise Module For Development Tools 15 Sp5 - 1 CVEs
Suse Linux Enterprise Module For Development Tools 15 Sp6 - 1 CVEs
Suse Linux Enterprise Module For Legacy Software 12 - 1 CVEs
Suse Linux Enterprise Module For Public Cloud - 1 CVEs
Suse Linux Enterprise Module For Public Cloud 15-sp1 - 1 CVEs
Suse Linux Enterprise Module For Sap Applications 15-sp1 - 1 CVEs
Suse Linux Enterprise Module For Server Applications 15 - 1 CVEs
Suse Linux Enterprise Module For Server Applications 15-sp1 - 1 CVEs
Suse Linux Enterprise Module For Suse Manager Server 4.1 - 1 CVEs
Suse Linux Enterprise Module For Web And Scripting 15 Sp5 - 1 CVEs
Suse Linux Enterprise Module For Web And Scripting 15 Sp6 - 1 CVEs
Suse Linux Enterprise Real Time Extension - 1 CVEs
Suse Linux Enterprise Server 11-security - 1 CVEs
Suse Linux Enterprise Server 11-sp3 - 1 CVEs
Suse Linux Enterprise Server 12 Sp3 - 1 CVEs
Suse Linux Enterprise Server 12 Sp5 - 1 CVEs
Suse Linux Enterprise Server 15-sp2 - 1 CVEs
Suse Linux Enterprise Server 15 Sp2-ltss - 1 CVEs
Suse Linux Enterprise Server 15 Sp3 - 1 CVEs
Suse Linux Enterprise Server 15 Sp3-ltss - 1 CVEs
Suse Linux Enterprise Server 15 Sp4 - 1 CVEs
Suse Linux Enterprise Server 15 Sp 3 - 1 CVEs
Suse Linux Enterprise Server For Sap 12-sp1 - 1 CVEs
Suse Linux Enterprise Server For Sap 15-sp1 - 1 CVEs
Suse Linux Enterprise Server For Sap 15-sp3 - 1 CVEs
Suse Linux Enterprise Server For Sap Applications 12 Sp5 - 1 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp2 - 1 CVEs
Suse Linux Enterprise Server For Sap Applications 15 Sp3 - 1 CVEs
Suse Linux Enterprise Software Development Kit 12 Sp5 - 1 CVEs
Suse Linux Enterprise Workstation Extension - 1 CVEs
Suse Linux Firewall - 1 CVEs
Suse Linux Firewall Live-cd - 1 CVEs
Suse Linux Imap Server - 1 CVEs
Suse Manager - 1 CVEs
Suse Manager Proxy Module 4.3 - 1 CVEs
Suse Manager Server 3.2 - 1 CVEs
Suse Manager Server 4.3 - 1 CVEs
Suse Manager Server 5.0 - 1 CVEs
Suse Observability - 1 CVEs
Suse Openstack Cloud 9 - 1 CVEs
Suse Package Hub 15 Sp5 - 1 CVEs
Suse Package Hub 15 Sp6 - 1 CVEs
Suse Sled Beagle - 1 CVEs
Suse Studio Onsite - 1 CVEs
Suse Studio Onsite 1.1 Appliance - 1 CVEs
Susefirewall2 - 1 CVEs
Trousers - 1 CVEs
Virtual Machine Driver Pack - 1 CVEs
Vpnc - 1 CVEs
Yast2 - 1 CVEs
Yast2-auth-client - 1 CVEs
Yast2-backup - 1 CVEs
Yast2-multipath - 1 CVEs
Yast2-printer - 1 CVEs
Yast2-rmt - 1 CVEs
Yast2-samba-client - 1 CVEs
Yast2-samba-provision - 1 CVEs
Yast2-security - 1 CVEs
Yast2-users - 1 CVEs
Zypper - 1 CVEs
Aaa Base - 0 CVEs
Blog - 0 CVEs
Filesystem - 0 CVEs
Linux Enterprise Server 8 On Ibm Zseries S390 - 0 CVEs
Linux Firewall On Cd Admin Host - 0 CVEs
Lvm2 - 0 CVEs
Multi-linux Support - 0 CVEs
Novell Linux Pos - 0 CVEs
Open Suse - 0 CVEs
Suse Linux Desktop - 0 CVEs
Suse United Linux - 0 CVEs
System-group-hardware - 0 CVEs
System-user-root - 0 CVEs
System-users - 0 CVEs
Systemd-presets-branding-sle - 0 CVEs
Sysuser-shadow - 0 CVEs
Sysuser-tools - 0 CVEs
Tcpd - 0 CVEs

Newest CVEs of Suse

CVE-2026-104618 - CVSS 6.9 (medium), 2026-10-15: On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means…
CVE-2026-104617 - CVSS 5.9 (medium), 2026-10-15: There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for…
CVE-2023-32198 - CVSS 8 (high), 2026-10-15: A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote…
CVE-2024-22031 - CVSS 8.5 (high), 2026-10-15: A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same…
CVE-2025-23390 - CVSS 6.3 (medium), 2026-10-15: A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH…
CVE-2026-88804 - CVSS 9.6 (critical), 2026-09-28: An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE…
CVE-2026-88805 - CVSS 8.1 (high), 2026-09-28: Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE…
CVE-2026-88808 - CVSS 8.8 (high), 2026-09-28: A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin…
CVE-2026-93540 - CVSS 6.5 (medium), 2026-09-28: A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options,…
CVE-2026-93539 - CVSS 5.4 (medium), 2026-09-28: A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook…
CVE-2026-93538 - CVSS 7.1 (high), 2026-09-28: A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the…
CVE-2026-93537 - CVSS 6.5 (medium), 2026-09-28: A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or…
CVE-2026-78424 - CVSS 8.8 (high), 2026-09-28: Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to…
CVE-2026-78427 - CVSS 5.3 (medium), 2026-09-17: The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar…
CVE-2026-78425 - CVSS 7.6 (high), 2026-09-17: Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or…
CVE-2026-78426 - CVSS 2 (low), 2026-09-17: The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but…
CVE-2026-78428 - CVSS 8.8 (high), 2026-09-17: For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when…
CVE-2026-44940 - CVSS 5.7 (medium), 2026-09-17: The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them…
CVE-2026-44950 - CVSS 9.5 (critical), 2026-09-10: fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that…
CVE-2026-59679 - CVSS 9.2 (critical), 2026-09-10: fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16…
CVE-2025-46808 - CVSS 6.8 (medium), 2026-09-09: An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log…
CVE-2026-75036 - CVSS 5.3 (medium), 2026-09-03: A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources…
CVE-2026-75035 - CVSS 7.7 (high), 2026-09-03: A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store…
CVE-2026-75034 - CVSS 7.4 (high), 2026-09-03: A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a…
CVE-2026-75033 - CVSS 7.7 (high), 2026-09-03: A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without…
CVE-2026-71404 - CVSS 8.7 (high), 2026-09-03: A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name`…
CVE-2026-71403 - CVSS 6.1 (medium), 2026-09-03: A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIds` fields. A user…
CVE-2026-25706 - CVSS 7.5 (high), 2026-09-01: Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory…
CVE-2026-59681 - CVSS 8.8 (high), 2026-09-01: A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands…
CVE-2026-59680 - CVSS 8.6 (high), 2026-09-01: An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in…