Suse
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Suse product.
RSS Feeds for Suse security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Suse products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Suse Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 7 vulnerabilities in Suse with an average score of 7.8 out of ten. Last year, in 2025 Suse had 29 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Suse in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.52.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 7 | 7.81 |
| 2025 | 29 | 7.29 |
| 2024 | 8 | 7.00 |
| 2023 | 20 | 7.84 |
| 2022 | 21 | 7.10 |
| 2021 | 11 | 6.57 |
| 2020 | 39 | 6.41 |
| 2019 | 13 | 7.09 |
| 2018 | 39 | 7.55 |
It may take a day or so for new Suse vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Suse Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-25702 | Mar 05, 2026 |
Improper Access Control in SUSE Linux Enterprise Server Kernel Breaks nftablesA Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d. |
|
| CVE-2025-62879 | Mar 04, 2026 |
S3 Credentials Leak in Rancher Backup Operator LogsA vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs. |
|
| CVE-2025-62878 | Feb 25, 2026 |
Privilege Escalation via PersistentVolume Path Manipulation in SUSE OpenShiftA malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories. |
|
| CVE-2025-67601 | Feb 25, 2026 |
Rancher CLI CA Bypass via -skip-verify FlagA vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the cacert flag results in the CLI attempting to fetch CA certificates stored in Ranchers setting cacerts. |
|
| CVE-2025-67860 | Feb 25, 2026 |
NeuVector Scanner Credential Leak via CLI ArgsA vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users. |
|
| CVE-2025-62877 | Jan 08, 2026 |
Harvester 1.5/1.6 Interactive Installer Exposes OS Default SSH PasswordProjects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup. |
|
| CVE-2025-66001 | Jan 08, 2026 |
NeuVector OIDC TLS SkipMITM RiskNeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks. |
|
| CVE-2025-62875 | Nov 20, 2025 |
Crash via Improper Check (CVE-2025-62875) in OpenSMTPD before 7.8.0p0-1.1An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1. |
|
| CVE-2025-62876 | Nov 12, 2025 |
Privilege Escalation via Unnecessary Privileges in lightdm-kde-greeter <6.0.4A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4. |
|
| CVE-2025-53883 | Oct 30, 2025 |
Reflected XSS in SUSE Manager Server <5.0.28 / <4.3.88A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x86_64/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manager Server LTS 4.3: from ? before 4.3.88-150400.3.113.5. |
|
| CVE-2025-53880 | Oct 30, 2025 |
tftpsync Path Traversal Write/Del via TFTP Scripts (CVE-2025-53880)A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses. |
|
| CVE-2025-54471 | Oct 30, 2025 |
NeuVector Hard-Coded Key in Source Enables Config Encryption DisclosureNeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data. |
|
| CVE-2025-54469 | Oct 30, 2025 |
NeuVector Enforcer Command Injection via Unsanitized CLUSTER_* PortsA vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the enforcer container stops, the monitor process checks whether the consul subprocess has exited. To perform this check, the monitor process uses the popen function to execute a shell command that determines whether the ports used by the consul subprocess are still active. The values of environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT are used directly to compose shell commands via popen without validation or sanitization. This behavior could allow a malicious user to inject malicious commands through these variables within the enforcer container. |
|
| CVE-2025-54470 | Oct 30, 2025 |
NeuVector TLS Cert Verification Bypass in Anonymous Telemetry (MITM/DoS)This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled. When this option is enabled, NeuVector sends anonymous telemetry data to the telemetry server. In affected versions, NeuVector does not enforce TLS certificate verification when transmitting anonymous cluster data to the telemetry server. As a result, the communication channel is susceptible to man-in-the-middle (MITM) attacks, where an attacker could intercept or modify the transmitted data. Additionally, NeuVector loads the response of the telemetry server is loaded into memory without size limitation, which makes it vulnerable to a Denial of Service(DoS) attack |
|
| CVE-2024-58269 | Oct 29, 2025 |
CVE-2024-58269: Rancher Manager audit log data exposureA vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs. |
|
| CVE-2023-32199 | Oct 29, 2025 |
Rancher Manager: Removing GlobalRole Leaves Admin AccessA vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still retains access to clusters. This only affects custom Global Roles that have a * on * in * rule for resources or have a * on * rule for non-resource URLs |
|
| CVE-2024-58260 | Oct 02, 2025 |
Rancher Manager: Missing Validation on .username Field Causes Denial of AccessA vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. |
|
| CVE-2024-58267 | Oct 02, 2025 |
Rancher Manager CLI SAML Phishing VulnerabilityA vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Ranchers authentication tokens. |
|
| CVE-2025-54468 | Oct 02, 2025 |
Rancher Manager Header Leak via /meta/proxy (Impersonate-Extra-*)A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses. |
|
| CVE-2025-8077 | Sep 17, 2025 |
NeuVector <5.4.5 Default admin password exposes full API accessA vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default credentials to obtain an authentication token. This token can then be used to perform any operation via NeuVector APIs. |
|
| CVE-2025-54467 | Sep 17, 2025 |
NeuVector Process Rule Violation Logs Expose PasswordsWhen a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log. |
|
| CVE-2025-53884 | Sep 17, 2025 |
NeuVector unsalted hash vulnerable to rainbow table attacksNeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed). |
|
| CVE-2025-46811 | Jul 30, 2025 |
SUSE Manager RCE via /rhn/websocket/minion/remote-commands before 5.0.14A Missing Authentication for Critical Function vulnerability in SUSE Manager allows anyone with access to the websocket at /rhn/websocket/minion/remote-commands to execute arbitrary commands as root. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 0.3.7-150600.3.6.2; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 0.3.7-150400.3.39.4; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2. |
|
| CVE-2025-32463 | Jun 30, 2025 |
Sudo <1.9.17p1 LPE via chroot /etc/nsswitch.confSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. |
And others... |
| CVE-2024-22036 | Apr 16, 2025 |
Rancher 2.7-2.9 PrivEsc via node driver chroot escape CVE-2024-22036A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher container itself. For the test and development environments, based on a privileged Docker container, it is possible to escape the Docker container and gain execution access on the host system. This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3. |
|
| CVE-2023-32197 | Apr 16, 2025 |
Rancher RoleTemplate Priv Esc (external=true) <2.7.14, <2.8.5A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5. |
|
| CVE-2024-52281 | Apr 16, 2025 |
Stored XSS via Cluster Description Field in SUSE Rancher 2.9.0-2.9.3A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4. |
|
| CVE-2024-52280 | Apr 11, 2025 |
Rancher Underspecified Access via Generic PermissionsA Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b. |
|
| CVE-2025-23391 | Apr 11, 2025 |
Rancher <2.8.14,<2.9.8,<2.10.4 PrivEsc: Restricted Admin Password ResetA Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4. |
|
| CVE-2025-23389 | Apr 11, 2025 |
Improper Access Control in SUSE Rancher <2.8.13, <2.9.7, <2.10.3 via SAMLA Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3. |
|
| CVE-2025-23388 | Apr 11, 2025 |
Stack Overflow in SUSE Rancher 2.8.0-2.8.12 DoSA Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3. |
|
| CVE-2025-23387 | Apr 11, 2025 |
SUSE Rancher 2.8-2.10: Unauth CLI Token ExposureA Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3. |
|
| CVE-2024-52282 | Apr 11, 2025 |
SUSE Rancher 2.8.x/2.9.x Sensitive Info Leak in Apps Catalog (CVE-2024-52282)A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps values. Additionally, the same information leaks into auditing logs when the audit level is set to equal or above 2. This issue affects rancher: from 2.8.0 before 2.8.10, from 2.9.0 before 2.9.4. |
|
| CVE-2024-12087 | Jan 14, 2025 |
Path traversal in rsync via --inc-recursive optionA path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client. |
|
| CVE-2024-12086 | Jan 14, 2025 |
Rsync Server Remote File Enumeration via Checksum ExploitA flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client. |
|
| CVE-2024-12085 | Jan 14, 2025 |
Rsync: Checksum Length Manipulation Enables Stack Data LeakA flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. |
|
| CVE-2022-45157 | Nov 13, 2024 |
Rancher vSphere CPI and CSI Credential Storage VulnerabilityA vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments. |
|
| CVE-2024-46956 | Nov 10, 2024 |
Ghostscript 10.03 Out-of-Bounds AccessAn issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. |
And others... |
| CVE-2024-46953 | Nov 10, 2024 |
Ghostscript 10.03 Path Traversal OverflowAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution. |
And others... |
| CVE-2024-46955 | Nov 10, 2024 |
Ghostscript 10.03 Indexed Color OOB ReadAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. |
And others... |
| CVE-2024-46951 | Nov 10, 2024 |
Ghostscript 10.03 Pattern Color Space RCEAn issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution. |
And others... |
| CVE-2023-22649 | Oct 16, 2024 |
Rancher Audit Log Sensitive Data LeakA vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log) is an opt-in feature, only deployments that have it enabled and have [AUDIT_LEVEL](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log#audit-log-levels) set to `1 or above` are impacted by this issue. |
|
| CVE-2024-6387 | Jul 01, 2024 |
OpenSSH Race Condition leading to RCE, known as regreSSHionA security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. |
|
| CVE-2024-23301 | Jan 12, 2024 |
World-readable initrd via GRUB_RESCUE=y in ReaR <=2.7Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root. |
|
| CVE-2020-10676 | Dec 12, 2023 |
CVE-2020-10676: Unauth Namespace Relocation in Rancher 2.x <2.6.13/2.7.4In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project. |
|
| CVE-2023-22644 | Sep 20, 2023 |
NeuVector JWT Token Forgery (CVE-2023-22644) Enables RCEA user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE. |
|
| CVE-2023-32182 | Sep 19, 2023 |
SUSE Postfix Link Follow Vulnerability before 3.7.3-150500.3.5.1A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1. |
|
| CVE-2023-32186 | Sep 19, 2023 |
DoS: Unlimited Resource Allocation in SUSE RKE2 <1.24.17, <1.25.13, <1.26.8A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/supervisor port (TCP 6443) cause denial of service. This issue affects RKE2: from 1.24.0 before 1.24.17+rke2r1, from v1.25.0 before v1.25.13+rke2r1, from v1.26.0 before v1.26.8+rke2r1, from v1.27.0 before v1.27.5+rke2r1, from v1.28.0 before v1.28.1+rke2r1. |
|
| CVE-2023-22647 | Jun 01, 2023 |
Rancher 2.6.x Improper Privilege Management (Secret Escalation)An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this operation was followed-up by other specially crafted commands, it could result in the user gaining access to tokens belonging to service accounts in the local cluster. This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4. |
|
| CVE-2023-22648 | Jun 01, 2023 |
Rancher 2.6.7-2.6.12/2.7.0-2.7.3: Privilege MisMgmt (CVE-2023-22648)A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI. This would cause the users to retain their previous permissions in Rancher, even if they change groups on Azure AD, for example, to a lower privileged group, or are removed from a group, thus retaining their access to Rancher instead of losing it. This issue affects Rancher: from >= 2.6.7 before < 2.6.13, from >= 2.7.0 before < 2.7.4. |
|