SUSE vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-22031 A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same nHigh 8.5 · Oct 15, 2026
• CVE-2023-32198 A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote servHigh 8 · Oct 15, 2026
• CVE-2026-88808 A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials High 8.8 · Sep 28, 2026
• CVE-2026-88805 Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out.High 8.1 · Sep 28, 2026
• CVE-2026-88804 An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE RanCritical 9.6 · Sep 28, 2026
• CVE-2026-93538 A cross-tenant authorization issue was discovered in SUSE Rancher Fleet.High 7.1 · Sep 28, 2026
• CVE-2026-78424 Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuHigh 8.8 · Sep 28, 2026
• CVE-2026-78428 For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when mulHigh 8.8 · Sep 17, 2026
• CVE-2026-78425 Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anythiHigh 7.6 · Sep 17, 2026
• CVE-2026-59679 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reCritical 9.2 · Sep 10, 2026
• CVE-2026-44950 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer.Critical 9.5 · Sep 10, 2026
• CVE-2026-75035 A flaw was found in Rancher Manager.High 7.1 · Sep 3, 2026
• CVE-2026-75034 A flaw was found in Rancher Manager.High 7.4 · Sep 3, 2026
• CVE-2026-75033 A flaw was found in Rancher Manager.High 7.7 · Sep 3, 2026
• CVE-2026-71404 A flaw was found in Rancher Manager.High 8.7 · Sep 3, 2026
• CVE-2026-59681 A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands asHigh 8.7 · Sep 1, 2026
• CVE-2026-59680 An OS command injection vulnerability was found in yast2-users.High 8.6 · Sep 1, 2026
• CVE-2026-25706 Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory direcHigh 7.5 · Sep 1, 2026
• CVE-2026-44945 A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go).Critical 9.1 · Aug 5, 2026
• CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive iHigh 7.3 · Aug 5, 2026
• CVE-2026-59675 When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints.High 7.5 · Aug 5, 2026
• CVE-2026-59674 A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root.High 7.1 · Jul 14, 2026
• CVE-2026-44938 A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeHigh 8.8 · Jul 7, 2026
• CVE-2026-44937 Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 andHigh 8.3 · Jul 6, 2026
• CVE-2026-44934 A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive High 7 · Jul 6, 2026