75 matches found
CVE-2026-55996 Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent
A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...
EUVD-2026-40304
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
CVE-2026-44946 SAML Authentication Replay in Rancher
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service ACS handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,...
CVE-2026-41052 Rancher Privilege Escalation from Project Owner to Host
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10...
CVE-2026-44939 Command injection through unsanitized YAML parameter in Rancher
A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers...
Rancher cloud credentials can be used through proxy API by users without access
A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...
EUVD-2021-12217
Malware in sbrugna...
EUVD-2021-1233
Malware in sbrugna...
EUVD-2022-2020
Malicious code in bioql PyPI...
EUVD-2023-0404
Malicious code in bioql PyPI...
EUVD-2022-2822
Malicious code in bioql PyPI...
EUVD-2025-6275
Malicious code in bioql PyPI...
EUVD-2024-1195
Malicious code in bioql PyPI...
EUVD-2025-0078
Malicious code in bioql PyPI...
EUVD-2024-2981
Malicious code in bioql PyPI...
EUVD-2022-52825
Malicious code in bioql PyPI...
EUVD-2023-0449
Malicious code in bioql PyPI...
EUVD-2022-2368
Malicious code in bioql PyPI...