Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

SUSE vulnerabilities

253 published CVEs name SUSE among the affected products.

Newest CVEs

  • CVE-2026-116472

    ingress-nginx mirror-target self-DOS

    Kubernetes · ingress-nginx

    Low2.7
  • CVE-2026-88811

    Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

    SUSE · Rancher

    Critical9.1
  • CVE-2026-88810

    Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

    SUSE · Rancher

    High7.2
  • CVE-2026-88809

    Rancher meta proxy allowlist bypass leading to server-side request forgery

    SUSE · Rancher

    High7.6
  • CVE-2026-94290

    Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

    SUSE · Rancher

    Critical9.1
  • CVE-2026-104623

    Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

    SUSE · Rancher

    Medium6.3
  • CVE-2026-104615

    Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

    SUSE · Rancher

    High7.9
  • CVE-2026-104618

    sdbootutil: world-readable debug log

    SUSE · SUSE Linux Enterprise Server 16.1

    Medium6.9
  • CVE-2026-104617

    sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

    SUSE · SUSE Linux Enterprise Server 16.1

    Medium5.9
  • CVE-2023-32198

    Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks

    SUSE · steve

    High8.0