SUSE Archives • Daily CyberSecurity

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1

Rancher privilege escalation flaw CVE-2026-44945 via cross-cluster impersonation, rated CVSS 9.1

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1

Do Son August 11, 2026

CVE-2026-44945 lets a default Rancher user gain full admin control via cross-cluster impersonation. Privilege escalation rated CVSS 9.1.

Silent Leak: High-Severity Rancher CLI Flaw Exposes Admin Credentials CVE-2024-52281 Rancher CLI Vulnerability CVE-2025-67601

Silent Leak: High-Severity Rancher CLI Flaw Exposes Admin Credentials

Do Son February 4, 2026

High-severity Rancher CLI flaw (CVE-2025-67601) exposes credentials via MitM attacks when using --skip-verify. Update or use -cacert immediately.

Game Over? Critical InputPlumber Flaws Expose Linux Gamers to Hijacking InputPlumber Vulnerability CVE-2025-66005

Game Over? Critical InputPlumber Flaws Expose Linux Gamers to Hijacking

Do Son January 12, 2026

Critical flaws in InputPlumber (CVE-2025-66005) expose Linux gamers to session hijacking. Update to v0.69.0 or SteamOS 3.7.20 immediately to secure.

Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control Foomuuri Vulnerability CVE-2025-67603 bypass WAF protections

Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control

Do Son January 9, 2026

Critical Foomuuri flaws (CVE-2025-67603) allow local users to hijack firewall settings. SUSE urges immediate update to v0.31 to secure your system.

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life

TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility

Do Son January 8, 2026

CVE-2025-67859: TLP 1.9.0 flaw lets users bypass root auth. SUSE researchers urge Linux users to update to version 1.9.1 to fix this critical security gap.

CVE-2025-8077 (CVSS 9.8): CRITICAL Flaw in NeuVector Exposes Kubernetes Clusters to Full Takeover NeuVector, Kubernetes vulnerability CVE-2025-8077

NeuVector, Kubernetes vulnerability CVE-2025-8077

CVE-2025-8077 (CVSS 9.8): CRITICAL Flaw in NeuVector Exposes Kubernetes Clusters to Full Takeover

Do Son September 1, 2025

A critical flaw in NeuVector (CVE-2025-8077) allows attackers to bypass authentication with a hardcoded password, exposing Kubernetes clusters to full compromise.

CVE-2024-58259: DoS Flaw in Rancher Manager Allows Unauthenticated Attackers to Crash Servers Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

CVE-2024-58259: DoS Flaw in Rancher Manager Allows Unauthenticated Attackers to Crash Servers

Do Son September 1, 2025

A high-severity DoS flaw (CVE-2024-58259) in Rancher Manager allows attackers to crash servers by sending oversized API requests. Admins are urged to patch immediately.

Two sslh Flaws Disclosed: Remote DoS Attacks Possible via Protocol Multiplexer sslh Vulnerabilities, DoS Attack

Two sslh Flaws Disclosed: Remote DoS Attacks Possible via Protocol Multiplexer

Do Son June 17, 2025

SUSE disclosed flaws in sslh (CVE-2025-46807, CVE-2025-46806) allowing remote DoS attacks via file descriptor exhaustion and unsafe memory access.

Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks CVE-2024-22030 - CVE-2025-23388 & CVE-2025-23389

Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks

Do Son March 3, 2025

These flaws, identified as CVE-2025-23388 and CVE-2025-23389, could allow attackers to launch denial-of-service (DoS) attacks and impersonate users