Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2026/09/28 3:58 p.m.•14 views

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

9.6CVSS5.9AI score0.00599EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 3:58 p.m.•92 views

CVE-2026-88804

SUSE Rancher is vulnerable to a stored cross-site scripting (XSS) attack due to an unauthenticated update of public UI settings. This vulnerability impacts versions 2.15 before 2.15.2 , 2.14 before 2.14.6 , 2.13 before 2.13.10 , 2.12 before 2.12.14 , and 2.11 before 2.11.18 . Remote attackers can...

9.6CVSS5.9AI score0.00599EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 3:58 p.m.•46 views

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

9.6CVSS0.00599EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/28 3:58 p.m.•31 views

CVE-2026-88804 Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

9.6CVSS6AI score
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/24 4:26 p.m.•14 views

SUSE CVE-2026-88804

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

9.6CVSS5.9AI score0.00599EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•9 views

PT-2026-97727

Name of the Vulnerable Software and Affected Versions Rancher affected versions not specified Description An unauthenticated attacker can perform an update of public UI settings to plant malicious content that executes in the browser of users visiting the login page. This stored Cross-Site...

9.6CVSS5.7AI score0.00599EPSS
SaveExploits0References11
Rows per page
Query Builder