SUSE vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20185
3. 201914
4. 202012
5. 202112
6. 202125
7. 202219
8. 202425
9. 202521
10. 202522
11. 202662
12. 202633

Newest CVEs

• CVE-2026-88811

  Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

  SUSE · Rancher

  Critical9.1
• CVE-2026-88810

  Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

  SUSE · Rancher

  High7.2
• CVE-2026-88809

  Rancher meta proxy allowlist bypass leading to server-side request forgery

  SUSE · Rancher

  High7.6
• CVE-2026-94290

  Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

  SUSE · Rancher

  Critical9.1
• CVE-2026-104623

  Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

  SUSE · Rancher

  Medium6.3
• CVE-2026-104615

  Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

  SUSE · Rancher

  High7.9
• CVE-2026-104618

  sdbootutil: world-readable debug log

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium6.9
• CVE-2026-104617

  sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium5.9
• CVE-2023-32198

  Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks

  SUSE · steve

  High8.0
• CVE-2024-22031

  Rancher users who can create Projects can gain access to arbitrary projects

  SUSE · rancher

  High8.5