https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:28.826866+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-93539 fkie_cve-2026-93539 2026-09-30T23:09:28.828544+00:00

A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any namespace. A caller with network access to the webhook service and no Kubernetes credentials can therefore alter GitRepo configuration outside

the namespaces they are authorized for.  This only affects SUSE Rancher Fleet 0.16 before 0.16.2, older versions are not affected.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3546 WID-SEC-W-2026-3546 — Fleet: Mehrere Schwachstellen 2026-09-30T23:09:28.828625+00:00

Ein Angreifer kann mehrere Schwachstellen in Fleet ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen und einen Denial-of-Service-Zustand auszulösen.