74 matches found
CVE-2026-44946 SAML Authentication Replay in Rancher
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
EUVD-2026-40304
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
CVE-2026-41052 Rancher Privilege Escalation from Project Owner to Host
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10...
CVE-2026-44939 Command injection through unsanitized YAML parameter in Rancher
A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers...
Rancher cloud credentials can be used through proxy API by users without access
A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...
EUVD-2021-12217
Malware in sbrugna...
EUVD-2021-1233
Malware in sbrugna...
EUVD-2023-26781
Malicious code in bioql PyPI...
EUVD-2022-5793
Malicious code in bioql PyPI...
EUVD-2023-0449
Malicious code in bioql PyPI...
EUVD-2024-2981
Malicious code in bioql PyPI...
EUVD-2024-3170
Malicious code in bioql PyPI...
EUVD-2024-3054
Malicious code in bioql PyPI...
EUVD-2022-2368
Malicious code in bioql PyPI...
EUVD-2024-2807
Malicious code in bioql PyPI...
EUVD-2022-2020
Malicious code in bioql PyPI...
EUVD-2025-6275
Malicious code in bioql PyPI...
EUVD-2025-0078
Malicious code in bioql PyPI...