TU
Product
Tumbleweed
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 5Medium 5Low 0
Watch
Add Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-46810 | 8.5 | Sep 2 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed:… Affected: ? before 2.11.29 |
| CVE-2023-32183 | 7.8 | Jul 7 | Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE… Affected: All versions, or not specified |
| CVE-2022-31250 | 7.8 | Jul 20 | A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root Affected: before 6.4.2-1.1 |
| CVE-2020-8026 | 7.8 | Aug 7 | A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new… Affected: through 2.6.2-4.2 |
| CVE-2024-49506 | 7.3 | Nov 13 | Fixed temporary file path in aeon-checks allows fixing of disk encryption key Affected: before 1.0.2; before 1.2.4 |
Showing 5