TU
Product
Tumbleweed
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 5Medium 5Low 0
Watch
Add Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-53881 | 6.9 | Oct 2 | SUSE-specific logrotate configuration allows escalation from mail user/group to root Affected: ? before 4.98.2-lp156.248.1 |
| CVE-2026-104618 | 6.2 | Oct 15 | sdbootutil: world-readable debug log Affected: ? before 278458aeb7d8f995c0e3dc9d19d2dcba50795a42 |
| CVE-2024-49505 | 6.1 | Nov 13 | XSS vulnerability found in OpenSuse MirrorCache Affected: before 1.083 |
| CVE-2025-62875 | 5.5 | Nov 20 | Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock Affected: before 7.8.0p0-1.1 |
| CVE-2026-104617 | 5.1 | Oct 15 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline Affected: ? before 947e9dc09ce7c36b35a868e397e30245cc5544a1 |
Showing 5