S
Vendor security profile6 actively exploited CVEs
suse
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs59
Critical8
CISA KEV6
Public exploit18
Patch rate%34
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
1
0
3
3
7
25
0
CVE KEV
CVE severity distribution
59toplam CVE
Critical8 (14%)
High33 (56%)
Medium16 (27%)
Low2 (3%)
Patch and exploitation view
%34
Verified patch
%10
CISA KEV
%31
Public exploit
19Patch available
1Partial
1Workaround
0Vendor: no patch
38Unknown
Latest vulnerabilities
9.6
CVE-2026-88804
Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
S
Patch status unknownEPSS %1
8.1
CVE-2026-88805
Session Not Revoked Server-Side on Logout in Rancher
S
Patch status unknownEPSS %0
8.8
CVE-2026-88808
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
S
Patch status unknownEPSS %0
6.5
CVE-2026-93540
Fleet applies namespace labels and annotations without the bundle's service account privileges
S
Patch status unknownEPSS %0
5.4
CVE-2026-93539
Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver
S
Patch status unknownEPSS %0
7.1
CVE-2026-93538
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
S
Patch status unknownEPSS %0
6.5
CVE-2026-93537
Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory
S
Patch status unknownEPSS %0
8.8
CVE-2026-78424
OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
S
Patch status unknownEPSS %0
5.3
CVE-2026-85999
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
F
Patch status unknownEPSS %1
5.3
CVE-2026-86000
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
F
Patch status unknownEPSS %1