CVE-2026-44946 SAML Authentication Replay in Rancher

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...

EUVD-2026-40304

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...

CVE-2026-41052 Rancher Privilege Escalation from Project Owner to Host

Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10...

CVE-2026-44939 Command injection through unsanitized YAML parameter in Rancher

A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers...

Rancher cloud credentials can be used through proxy API by users without access

A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...

EUVD-2021-12217

Malware in sbrugna...

EUVD-2021-1233

Malware in sbrugna...

EUVD-2024-2002

Malicious code in bioql PyPI...

EUVD-2024-1195

Malicious code in bioql PyPI...

EUVD-2023-0449

Malicious code in bioql PyPI...

EUVD-2024-3170

Malicious code in bioql PyPI...

EUVD-2023-26781

Malicious code in bioql PyPI...

EUVD-2022-5793

Malicious code in bioql PyPI...

EUVD-2024-2807

Malicious code in bioql PyPI...

EUVD-2024-2981

Malicious code in bioql PyPI...

EUVD-2024-3054

Malicious code in bioql PyPI...

EUVD-2025-0078

Malicious code in bioql PyPI...

EUVD-2025-10799

Malicious code in bioql PyPI...

EUVD-2025-6275

Malicious code in bioql PyPI...

EUVD-2022-2368

Malicious code in bioql PyPI...