VanCleef

VanCleef Manipulación de parámetros web en Rancher 2.1.4 CVE-2019-11881 root@kitploit: ./vancleef.rb rancherip rancherport messagetodisplay double-quoted Example: ./vancleef.rb 192.168.0.1 8080 "Rancher is outdated. Please update following the instructions at http://192.168.0.25/rancher-updating"...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: tigera-operator, docker-cli-buildx, neuvector-scanner-fips, xeol-fips, cg, docker-cli-buildx-fips, grype, gatekeeper, helm-exporter, tigera-operator-fips, steampipe, harvester-fips, wolfictl, cloudbeat, docker-compose-fips, nerdctl-fips, amazon-ecs-agent,...

GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: helm-operator, headlamp, helm-push, tigera-operator, scorecard, zarf, manifest-tool, rancher, helm-set-status, grype, zot, wolfictl, docker, rancher-agent, trivy-operator, helm-mapkubeapis, steampipe, skaffold, k8sgpt, rancher-helm, k9s, nerdctl,...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, containerd, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, containerd, vault-secrets-webhook, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, sriov-network-device-plugin, pulumi-kubernetes-operator,...

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

CVE-2026-75035

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user'...

CVE-2026-75033

A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...

CVE-2026-71404

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable authz.management.cattle.io/cr-name annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could...

CVE-2026-71403

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...

CVE-2026-75035 Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user'...

CVE-2026-75035

SUSE Rancher Manager is affected by a flaw in the ext.cattle.io/v1 Token store where a crafted label selector causes the internal owner filter to be dropped, allowing any authenticated user (with the built-in User or User Base role) to list and watch other users' tokens. Exposed data includes tok...

CVE-2026-75035 Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user'...

CVE-2026-75034 Rancher: SAML Assertion Replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

CVE-2026-75034

CVE-2026-75034 is a SAML assertion replay flaw in Rancher Manager affecting versions before 2.15.1 (also patched in 2.14.5 and 2.13.9). The replay protection introduced to fix CVE-2026-44946 stored consumed assertion IDs in a per-process cache , so in high-availability deployments each replica on...

CVE-2026-75034 Rancher: SAML Assertion Replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

EUVD-2026-70506

A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...

CVE-2026-75033 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing

A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...

CVE-2026-75033

CVE-2026-75033 is a cross-cluster secret leakage vulnerability in Rancher Manager (before 2.15.1 ). Project Secrets were propagated into a namespace based solely on the field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. An ...

EUVD-2026-70504

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable authz.management.cattle.io/cr-name annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could...