SUSE vulnerabilities

CVEs per yearBy the year they were published

1. 201820
2. 201913
3. 202033
4. 202115
5. 202220
6. 202321
7. 202422
8. 202534
9. 202675

Newest CVEs

• CVE-2026-116472

  ingress-nginx mirror-target self-DOS

  Kubernetes · ingress-nginx

  Low2.7
• CVE-2026-88811

  Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

  SUSE · Rancher

  Critical9.1
• CVE-2026-88810

  Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

  SUSE · Rancher

  High7.2
• CVE-2026-88809

  Rancher meta proxy allowlist bypass leading to server-side request forgery

  SUSE · Rancher

  High7.6
• CVE-2026-94290

  Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

  SUSE · Rancher

  Critical9.1
• CVE-2026-104623

  Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

  SUSE · Rancher

  Medium6.3
• CVE-2026-104615

  Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

  SUSE · Rancher

  High7.9
• CVE-2026-104618

  sdbootutil: world-readable debug log

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium6.9
• CVE-2026-104617

  sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium5.9
• CVE-2023-32198

  Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks

  SUSE · steve

  High8.0