CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,241 CVEs published, 235 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,241
Show in the list
Critical, last 7 days
235
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product suse:rancher. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

40 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2022-43760High 8.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is executed…Jun 1, 2023
CVE-2023-22647High 8.0An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the se…Jun 1, 2023
CVE-2023-22648High 8.8A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI.Jun 1, 2023
CVE-2025-54468Medium 4.7Rancher sends sensitive information to external services through the `/meta/proxy` endpoint
Assigned by suse
Oct 2, 2025
CVE-2023-32199Medium 4.3Rancher user retains access to clusters despite Global Role removal
Assigned by suse
Oct 29, 2025
CVE-2024-58269Medium 4.3Rancher exposes sensitive information through audit logs
Assigned by suse
Oct 29, 2025
CVE-2025-67601High 8.3Rancher CLI skips TLS verification on Rancher CLI login command
Assigned by suse
Feb 25, 2026
CVE-2025-62878Critical 9.9Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
Assigned by suse
Feb 25, 2026
CVE-2025-62879Medium 6.8Rancher Backup Operator pod's logs leak S3 tokens
Assigned by suse
Mar 4, 2026
CVE-2026-25705High 8.4Rancher Extensions have arbitrary file access via path traversal
Assigned by suse
May 13, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .