Vulnerabilities

TI-2026-52726 CVE-2026-75035

Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

LOW 31

A flaw was found in Rancher Manager.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0034 Published 2026-09-03 Fixed in 2.15.1 CWE-639

TI-2026-52725 CVE-2026-75034

LOW 34

A flaw was found in Rancher Manager.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00323 Published 2026-09-03 Fixed in 2.15.1 CWE-294

TI-2026-52724 CVE-2026-75033

LOW 34

A flaw was found in Rancher Manager.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-09-03 Fixed in 2.15.1 CWE-639

TI-2026-50041 CVE-2026-71404

MEDIUM 40

A flaw was found in Rancher Manager.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00424 Published 2026-09-03 Fixed in 2.15.1 CWE-639

TI-2026-50040 CVE-2026-71403

LOW 29

A flaw was found in Rancher Manager.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00369 Published 2026-09-03 Fixed in 2.15.1 CWE-639