SUSE Rancher Manager 2.15.2 Local Cluster Shell Authorization Bypass

SUSE Rancher Manager versions 2.11.0 through 2.11.18, 2.12.0 through 2.12.14, 2.13.0 through 2.13.10, 2.14.0 through 2.14.6, and 2.15.0 through 2.15.2 contain an authorization bypass that allows an authenticated user without local-cluster access to obtain a shell pod on the management cluster. A...

CVE-2026-73519-WolfStack-PoC

CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthenticated RCE PoC for a hardcoded default authentication secret in WolfStack that lets a remote, unauthenticated attacker run arbitrary commands as root inside any managed Docker/LXC container. | ---|--- CVE| CVE-2026-73519 CNA| VulnChec...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

CVE-2023-28432_docker

CVE-2023-28432docker Test environments for CVE-2023-28432, information disclosure in MinIO clusters. The directories provide different versions / configurations for a MinIO cluster: Directory| Remark ---|--- leaked-key| Vulnerable instance, using the deprecated MINIOACCESSKEY environment variable...

Exploit for CVE-2026-104623

CVE-2026-104623 — Rancher Manager local-cluster-shell authoriz...

CVE-2025-1974

CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...

CVE-2026-117681

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

CVE-2026-112816

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted...

CVE-2026-104623

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted...

CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted...

CVE-2026-112816

Canonical LXD versions 4.0.14, 5.0.10, 5.21.8, and 6.9 (prior to updates 4.0.15, 5.0.11, 5.21.9, and 6.10.1) are vulnerable to improper certificate validation in the HTTPS listener . An unauthenticated attacker can use a crafted certificate chain to bypass authentication as a trusted client. This...

CVE-2026-104615

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

EUVD-2026-114186

A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...

CVE-2026-104623

An authorization bypass exists in the local cluster shell feature of SUSE Rancher Manager versions 2.15.0–2.15.3, 2.14.0–2.14.7, 2.13.0–2.13.11, 2.12.0–2.12.15, 2.11.0–2.11.19, and possibly older versions. The root cause is that an authorization check was not applied to every API route reaching t...

EUVD-2026-114135

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being...

CVE-2026-104615

A security vulnerability exists in the SUSE Rancher Fleet cluster registration flow, affecting versions before 0.12 , 0.13.0–0.13.17 , 0.14.0–0.14.12 , 0.15.0–0.15.17 , and 0.16.0–0.16.3 . The root cause is that the cluster identity claimed during a registration request is accepted without being ...