Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
SUSE CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
SUSE CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules field of a GlobalRole propagates permis
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
SUSE CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent on the target cluster. The controller did
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
SUSE CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). This endpoint is intended to forward requests only to destinatio
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
SUSE CVE-2026-104623
A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
SUSE CVE-2026-104615
A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.1
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
SUSE suse-2026-10
SUSE Security Releases - October 2026
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit