Where
AND
-Infinity
0

go/github.com/rancher/rancherRancher CLI skips TLS verification on Rancher CLI login command

Risk 71
Severity
8.4
First published (updated )

go/github.com/rancher/rancherRancher 'Audit Log' leaks sensitive information

Risk 72
Severity
8.4
First published (updated )

go/github.com/rancher/rancherIn Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allo…

Risk 82
Severity
8.8
First published (updated )

go/github.com/rancher/rancherXSS

Risk 69
Severity
8.4
First published (updated )

SUSE rancherA Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD …

Risk 79
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SUSE wranglerRancher/Wrangler: Denial of service when processing Git credentials

Risk 43
Severity
7.5
First published (updated )

SUSE rancherRancher: Command injection in Git package

Risk 60
Severity
7.6
First published (updated )

SUSE rancherAuthenticated user can gain unauthorized shell pod and kubectl access in the local cluster

Risk 79
Severity
8.8
First published (updated )

SUSE rancherRancher: Privilege escalation via promoted roles

Risk 79
Severity
8.8
First published (updated )

SUSE rancherPrivilege escalation for users with create/update permissions in Global Roles

Risk 66
Severity
7.2
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SUSE rancherExposure of repository credentials to external third-party sources

Risk 43
Severity
7.5
First published (updated )

go/github.com/rancher/rancherSteve API proxy impersonation

Risk 82
Severity
8.8
First published (updated )

go/github.com/rancher/rancherRancher: Privilege escalation vulnerability via malicious Connection header

Risk 82
Severity
8.8
First published (updated )

go/github.com/rancher/rancherrancher: API group not properly specified when creating Kubernetes RBAC resources

Risk 82
Severity
8.8
First published (updated )

go/github.com/rancher/rancherRancher: XSS on /v3/cluster/

Risk 48
Severity
7.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/rancher/rancherXSS, CSRF

Risk 62
Severity
8.7
First published (updated )

go/github.com/rancher/rancherIn Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin acc…

Risk 80
Severity
8.8
First published (updated )

go/github.com/rancher/rancherIn Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files…

Risk 82
Severity
8.8
First published (updated )

go/github.com/rancher/rancherIn Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and d…

Risk 62
Severity
8.1
First published (updated )

go/github.com/rancher/rancherRancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via…

Risk 80
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203