RA
Product
rancher
9
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add rancher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55997 | 8.8 | Aug 5 | Long-lived Rancher registration token exposed in plaintext Affected: 2.14.0 before 2.14.4; 2.13.0 before 2.13.8 |
| CVE-2021-36776 | 8.8 | Apr 4 | A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users Affected: before 2.5.10 |
| CVE-2021-36775 | 8.8 | Apr 4 | a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked Affected: before 2.4.18; 2.5.0 before 2.5.12; 2.6.0 before 2.6.3 |
| CVE-2021-31999 | 8.8 | Jul 15 | A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User"… Affected: before 2.4.16; 2.5.0 before 2.5.9 |
| CVE-2021-25318 | 8.8 | Jul 15 | A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to Affected: before 2.4.16; 2.5.0 before 2.5.9 |
| CVE-2023-32194 | 7.2 | Oct 16 | Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' Affected: 2.6.0 before 2.6.14; 2.7.0 before 2.7.10; 2.8.0 before 2.8.2 |
Showing 6