RA
Vendor
rancher
11
CVEs
0
On KEV
0
New 30D
Products
RA9.9
rancher
rancher
9 CVEs0 on KEV0 new
LO8.7
local-path-provisioner
rancher
1 CVEs0 on KEV0 new
NO8.3
Norman
Rancher
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55997 | RA rancher rancher | 8.8 | Aug 5 | Long-lived Rancher registration token exposed in plaintext |
| CVE-2026-44543 | LO local-path-provisioner rancher | 8.7 | May 28 | Local Path Provisioner: HelperPod Template Injection |
| CVE-2023-32196 | RA Rancher Rancher | 6.6 | Oct 16 | Rancher's External RoleTemplates can lead to privilege escalation |
| CVE-2023-32194 | RA Rancher Rancher | 7.2 | Oct 16 | Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' |
| CVE-2023-32193 | NO Norman Rancher | 8.3 | Oct 16 | Norman API Cross-site Scripting Vulnerability |
| CVE-2023-22649 | RA Rancher Rancher | 6.5 | Oct 16 | Rancher 'Audit Log' leaks sensitive information |
| CVE-2021-36776 | RA Rancher Rancher | 8.8 | Apr 4 | A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users |
| CVE-2021-36775 | RA Rancher Rancher | 8.8 | Apr 4 | a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked |
| CVE-2021-31999 | RA Rancher Rancher | 8.8 | Jul 15 | A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User"… |
| CVE-2021-25320 | RA Rancher Rancher | 9.9 | Jul 15 | A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID |
| CVE-2021-25318 | RA Rancher Rancher | 8.8 | Jul 15 | A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to |