vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-68426:...

CVE-2026-88811

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

EUVD-2026-115330

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

CVE-2026-88811

A missing filtering vulnerability in the SUSE Rancher Manager meta proxy allows rancher credentials to be leaked to cloud providers. This issue affects SUSE Rancher versions 2.15.0 to 2.15.3 , 2.14.0 to 2.14.7 , and 2.13.0 to 2.13.11 . The vulnerability is characterized by the insertion of sensit...

CVE-2026-88811

Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt This exploit chains CVE-2025-6018 and CVE-2025-6019 to achieve local privilege escalation from an unprivileged user to root on vulnerable SUSE/openSUSE systems. CVE-2025-6018 is a PAM Pluggable Authentication Modules environment variabl...

CVE-2026-94290

SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent on the target cluster. The controller did not sufficiently restrict which kubeconfig secrets a Fleet Cluster object was allowed to reference. As a result, a Fleet cluster defined...

CVE-2026-88809

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

EUVD-2026-115258

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2026-88809

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2026-88809 Rancher meta proxy allowlist bypass leading to server-side request forgery

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2026-88809 Rancher meta proxy allowlist bypass leading to server-side request forgery

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2026-88809 Rancher meta proxy allowlist bypass leading to server-side request forgery

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...