CVEs published by SUSE

CVEs published by SUSE (CVE Numbering Authority). 7 tracked.

• CVE-2023-22647 CRITICAL 9.9 UPGRADE An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existi
• CVE-2022-43760 HIGH 8.4 UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE
• CVE-2026-25703 HIGH 7.3 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing aut
• CVE-2026-59675 HIGH 7.5 When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enfor
• CVE-2026-44945 CRITICAL 9.1 A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersona
• CVE-2026-55998 MEDIUM 5.3 The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token
• CVE-2026-55996 MEDIUM 4.3 A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher

← Back to latest CVEs