CVE ID :CVE-2026-88811 Published : Nov. 2, 2026, 4:48 p.m. | 15 minutes ago Description :Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7,...

#Sicherheitslücke #Databreach #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-88811 - Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

VERWANDTEARTIKEL

CVE-2026-105769 - kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

CVE-2026-94290 - Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

CVE-2026-77876 - Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory

CVE-2026-77877 - Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root Access

CVE-2026-77878 - Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase API

CVE-2026-77879 - Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API