SUSE
Number 70 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: SUSE, suse
Total vulnerabilities
252
Critical
36
High
111
Known Exploited
0
Exploit available
2
Network, no login needed
20.2%
Of 252 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 74 | 13 | 36 | 22 | 3 | 0 |
| 2025 | 34 | 7 | 11 | 16 | 0 | 0 |
| 2024 | 22 | 3 | 10 | 7 | 2 | 0 |
| 2023 | 21 | 4 | 12 | 5 | 0 | 0 |
| 2022 | 20 | 3 | 8 | 8 | 1 | 0 |
| 2021 | 15 | 3 | 5 | 2 | 5 | 0 |
| 2020 | 33 | 2 | 17 | 12 | 2 | 0 |
| 2019 | 13 | 0 | 2 | 7 | 4 | 0 |
| 2018 | 20 | 1 | 10 | 7 | 2 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Rancher | 61 | 46 |
| rancher | 25 | 17 |
| neuvector | 12 | 7 |
| SUSE Linux Enterprise Server 12 | 9 | 3 |
| openSUSE Tumbleweed | 8 | 5 |
| libzypp | 7 | 6 |
| supportutils | 5 | 1 |
| SUSE Linux Enterprise Server 15 | 4 | 1 |
| open build service | 4 | 0 |
| openSUSE Factory | 4 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Authentication Issues | 15 | 13 |
| Command Injection | 13 | 9 |
| Incorrect Permissions | 13 | 6 |
| Improper Link Resolution Before File Access ('Link Following') | 12 | 7 |
| Information Disclosure | 12 | 2 |
| Privilege Escalation | 10 | 7 |
| Cross-Site Scripting | 9 | 4 |
| Improper Access Control | 7 | 6 |
| Memory Corruption | 7 | 5 |
| Path Traversal | 7 | 5 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-94290 | Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller | Critical | 0.5% | |
| CVE-2026-88811 | Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy | Critical | 0.4% | |
| CVE-2026-88810 | Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules | High | 0.5% | |
| CVE-2026-88809 | Rancher meta proxy allowlist bypass leading to server-side request forgery | High | 0.3% | |
| CVE-2026-104623 | Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster | Medium | 0.3% | |
| CVE-2026-104615 | Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace | High | 0.2% | |
| CVE-2026-104618 | sdbootutil: world-readable debug log | Medium | 0.1% | |
| CVE-2026-104617 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline | Medium | 0.1% | |
| CVE-2025-23390 | Fleet doesn’t validate a server’s certificate when connecting through SSH | Medium | 0.2% | |
| CVE-2024-22031 | Rancher users who can create Projects can gain access to arbitrary projects | High | 0.4% |