https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T17:33:37.397167+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-104623 fkie_cve-2026-104623 2026-11-02T17:33:37.407462+00:00

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4246 WID-SEC-W-2026-4246 — Rancher: Mehrere Schwachstellen 2026-11-02T17:33:37.407530+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen auszulesen oder Daten zu manipulieren.