Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE Rancher 0.12.15, 0.13.11 and 2 more versions Clear all filters
TI-2026-32803 CVE-2026-44937 · GHSA-jmf4-m7j9-g72r

SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components

Priority LOW 36

Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cau…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00424 Published 2026-07-06 Fixed in 0.15.2, 0.14.6 +2 CWE-918
TI-2026-32802 CVE-2026-44936 · GHSA-hx4v-cxpf-vh8m

Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

Priority LOW 23

Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00348 Published 2026-07-06 Fixed in 0.15.2, 0.14.6 +2 CWE-918