CVE-2026-44949

Summary: CVE-2026-44949 pertains to a vulnerability in the Rancher FleetWorkspace mutating webhook handled by the in-cluster rancher-webhook service. Affected versions: 0.7.0–0.7.10, 0.8.0–0.8.7, 0.9.0–0.9.6, and 0.10.0–0.10.7. Impact: An unauthenticated attacker with network access to the webhoo...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: grafana, cert-manager, zot, gitlab-runner, minio, flux, rancher, ratify, xeol, telegraf, spqr, teleport, nuclei, yunikorn-k8shim, terraform, gitea, cert-manager-istio-csr, harbor, external-secrets-operator, openbao, sftpgo-plugin-auth, k6, rclone, rancher-agent,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: grafana, cert-manager, zot, gitlab-runner, minio, flux, rancher, ratify, xeol, telegraf, spqr, teleport, nuclei, yunikorn-k8shim, terraform, gitea, cert-manager-istio-csr, harbor, external-secrets-operator, openbao, sftpgo-plugin-auth, k6, rclone, rancher-agent,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: minio, kyverno-fips, packer-fips, cert-manager, xeol, minio-fips, syncthing-fips, cert-manager-fips, openbao, cert-manager-istio-csr-fips, cert-manager-google-cas-issuer-fips, vault, opentofu-fips, zot, kyverno, agentbeat-fips, ratify, rancher-webhook, opentofu,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mcp-grafana, ghaudit, trivy-operator, ko, modelmesh-runtime-adapter, kubernetes-csi-external-attacher, atlantis, bento, cosign, pvc-autoresizer, omnibump, cerbos, kubernetes-dashboard-auth, dfc, kuberlr, redis-operator, croc, docker-cli-buildx, timestamp-authority,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, docker, ghaudit, k8ssandra-operator, cloud-sql-proxy, kube-fluentd-operator, s5cmd, qemu-guesthelper, cilium-certgen, thanos, kine, crossplane-provider-azure-storage, kube-vip-fips, kubernetes-csi-external-snapshotter,...

CVE-2023-22651

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...

CVE-2023-32193 vulnerabilities

Vulnerabilities for packages: rancher-webhook, rancher-agent...

GHSA-R8F4-HV23-6QP6 vulnerabilities

Vulnerabilities for packages: rancher-webhook, rancher-agent...