Read the docs

SUSE

Records1332All Threatist records
Exploited (KEV)50In CISA KEV
CVSS critical279CVSS 9.0–10.0
CVSS high499CVSS 7.0–8.9

Exploited now

SUSE records in CISA KEV
TI-2015-02923 ProFTPD Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-10-08TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2025-23530 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Priority CRITICAL 99KEV 2025-09-29TI-2013-00536 Adobe Flash Player Incorrect Default Permissions Vulnerability Priority CRITICAL 97KEV 2024-09-17TI-2013-00541 Adobe Flash Player Code Execution Vulnerability Priority CRITICAL 97KEV 2024-09-17

Components

Products in the NVD configurations · select one to filter the records
Linux Enterprise Server 476 records CRITICAL Linux Enterprise Desktop 462 records CRITICAL Linux Enterprise Software Development Kit 297 records CRITICAL Suse Linux 207 records HIGH Suse Linux Enterprise Server 129 records CRITICAL Linux Enterprise Workstation Extension 105 records CRITICAL Linux Enterprise 97 records CRITICAL Suse Linux Enterprise Desktop 81 records HIGH

Records

12 records in Rancher Fleet · all components

TI-2026-32801 CVE-2026-44935 · GHSA-xr65-5cpm-g36x

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

Priority MEDIUM 43

Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fle…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0049 Published 2026-07-02 Fixed in 0.15.2, 0.14.6 +2 CWE-1287
TI-2026-29689 CVE-2026-41050 · GHSA-765j-qfrp-hm3j

Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

Priority MEDIUM 43

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream clus…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0039 Published 2026-05-13 Fixed in 0.15.1, 0.14.5 +3 CWE-863
TI-2026-60216 CVE-2026-88808

Fleet agent copies downstream resources with cluster-admin privileges, allowing…

Priority MEDIUM 40

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00278 Published 2026-09-28 Fixed in 0.16.2, 0.15.7 +1 CWE-250
TI-2026-32804 CVE-2026-44938 · GHSA-864g-863m-vcvq

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Priority MEDIUM 40

A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00442 Published 2026-07-07 Fixed in 0.15.2, 0.14.6 +2 CWE-522
TI-2026-32803 CVE-2026-44937 · GHSA-jmf4-m7j9-g72r

SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

Priority LOW 36

Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cau…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00424 Published 2026-07-06 Fixed in 0.15.2, 0.14.6 +2 CWE-918
TI-2026-63017 CVE-2026-93537

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

Priority LOW 29

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00308 Published 2026-09-28 Fixed in 0.16.2, 0.15.7 +3 CWE-23
TI-2026-32814 CVE-2026-44948

Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler

Priority LOW 25

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the in…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00487 Published 2026-06-30 Fixed in 0.12.16, 0.13.12 +2 CWE-23
TI-2026-32802 CVE-2026-44936 · GHSA-hx4v-cxpf-vh8m

Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

Priority LOW 23

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-06 Fixed in 0.15.2, 0.14.6 +2 CWE-918
Open these records in search →