agentprime: suse-rancherEvery new CVE for suse-rancher.https://agentprime.io/CVE-2026-88811: Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxyhttps://agentprime.io/advisories/CVE-2026-88811/https://agentprime.io/advisories/CVE-2026-88811/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 16:48:44 GMTCVEcriticalCVE-2026-88810: Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRuleshttps://agentprime.io/advisories/CVE-2026-88810/https://agentprime.io/advisories/CVE-2026-88810/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 16:29:46 GMTCVECVE-2026-88809: Rancher meta proxy allowlist bypass leading to server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-88809/https://agentprime.io/advisories/CVE-2026-88809/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 16:03:20 GMTCVECVE-2026-94290: Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerhttps://agentprime.io/advisories/CVE-2026-94290/https://agentprime.io/advisories/CVE-2026-94290/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:29:41 GMTCVEcriticalCVE-2026-104623: Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management clusterhttps://agentprime.io/advisories/CVE-2026-104623/https://agentprime.io/advisories/CVE-2026-104623/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 16:11:30 GMTCVECVE-2026-104615: Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespacehttps://agentprime.io/advisories/CVE-2026-104615/https://agentprime.io/advisories/CVE-2026-104615/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 15:49:01 GMTCVECVE-2026-88804: Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancherhttps://agentprime.io/advisories/CVE-2026-88804/https://agentprime.io/advisories/CVE-2026-88804/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:58:34 GMTCVEcriticalCVE-2026-88805: Session Not Revoked Server-Side on Logout in Rancherhttps://agentprime.io/advisories/CVE-2026-88805/https://agentprime.io/advisories/CVE-2026-88805/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:50:34 GMTCVECVE-2026-88808: Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clustershttps://agentprime.io/advisories/CVE-2026-88808/https://agentprime.io/advisories/CVE-2026-88808/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:36:13 GMTCVECVE-2026-93540: Fleet applies namespace labels and annotations without the bundle's service account privilegeshttps://agentprime.io/advisories/CVE-2026-93540/https://agentprime.io/advisories/CVE-2026-93540/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 14:45:42 GMTCVECVE-2026-93539: Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiverhttps://agentprime.io/advisories/CVE-2026-93539/https://agentprime.io/advisories/CVE-2026-93539/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 14:19:55 GMTCVECVE-2026-93538: Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleethttps://agentprime.io/advisories/CVE-2026-93538/https://agentprime.io/advisories/CVE-2026-93538/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 14:10:21 GMTCVECVE-2026-93537: Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directoryhttps://agentprime.io/advisories/CVE-2026-93537/https://agentprime.io/advisories/CVE-2026-93537/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 13:29:10 GMTCVECVE-2026-75035: Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypasshttps://agentprime.io/advisories/CVE-2026-75035/https://agentprime.io/advisories/CVE-2026-75035/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:07:11 GMTCVECVE-2026-75034: Rancher: SAML Assertion Replayhttps://agentprime.io/advisories/CVE-2026-75034/https://agentprime.io/advisories/CVE-2026-75034/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:01:16 GMTCVECVE-2026-75033: Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofinghttps://agentprime.io/advisories/CVE-2026-75033/https://agentprime.io/advisories/CVE-2026-75033/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:57:34 GMTCVECVE-2026-71404: Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRolehttps://agentprime.io/advisories/CVE-2026-71404/https://agentprime.io/advisories/CVE-2026-71404/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:51:44 GMTCVECVE-2026-71403: Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebindhttps://agentprime.io/advisories/CVE-2026-71403/https://agentprime.io/advisories/CVE-2026-71403/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:45:37 GMTCVECVE-2026-44945: Cross-Cluster Impersonation Confused-Deputy Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-44945/https://agentprime.io/advisories/CVE-2026-44945/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 10:00:04 GMTCVEcriticalCVE-2026-55998: Cluster Existence Oracle via Unauthenticated Import Endpointhttps://agentprime.io/advisories/CVE-2026-55998/https://agentprime.io/advisories/CVE-2026-55998/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 07:51:21 GMTCVECVE-2026-59675: Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Servicehttps://agentprime.io/advisories/CVE-2026-59675/https://agentprime.io/advisories/CVE-2026-59675/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 07:49:11 GMTCVECVE-2026-55996: Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agenthttps://agentprime.io/advisories/CVE-2026-55996/https://agentprime.io/advisories/CVE-2026-55996/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 07:46:43 GMTCVECVE-2026-44934: Exposed tokens in SUSE Rancher AI Agent logshttps://agentprime.io/advisories/CVE-2026-44934/https://agentprime.io/advisories/CVE-2026-44934/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 08:45:26 GMTCVECVE-2026-44948: Path Traversal in Rancher Fleet ImageScan GitRepo Path Handlerhttps://agentprime.io/advisories/CVE-2026-44948/https://agentprime.io/advisories/CVE-2026-44948/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 15:12:17 GMTCVECVE-2026-44949: Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhookhttps://agentprime.io/advisories/CVE-2026-44949/https://agentprime.io/advisories/CVE-2026-44949/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 14:41:34 GMTCVECVE-2026-44947: Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancherhttps://agentprime.io/advisories/CVE-2026-44947/https://agentprime.io/advisories/CVE-2026-44947/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 14:21:01 GMTCVECVE-2026-44946: SAML Authentication Replay in Rancherhttps://agentprime.io/advisories/CVE-2026-44946/https://agentprime.io/advisories/CVE-2026-44946/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:14:54 GMTCVEcriticalCVE-2022-21947: rancher desktop: Dashboard API is network accessiblehttps://agentprime.io/advisories/CVE-2022-21947/https://agentprime.io/advisories/CVE-2022-21947/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Apr 2022 06:40:10 GMTCVECVE-2021-32001: K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a tokenhttps://agentprime.io/advisories/CVE-2021-32001/https://agentprime.io/advisories/CVE-2021-32001/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jul 2021 09:25:11 GMTCVE