Suse
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Suse product.
RSS Feeds for Suse security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Suse products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Suse Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 48 vulnerabilities in Suse with an average score of 7.5 out of ten. Last year, in 2025 Suse had 29 security vulnerabilities published. That is, 19 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.22.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 48 | 7.51 |
| 2025 | 29 | 7.29 |
| 2024 | 8 | 7.00 |
| 2023 | 20 | 7.84 |
| 2022 | 21 | 7.10 |
| 2021 | 11 | 6.57 |
| 2020 | 39 | 6.41 |
| 2019 | 13 | 7.09 |
| 2018 | 39 | 7.46 |
It may take a day or so for new Suse vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Suse Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2025-46808 | Sep 09, 2026 |
Sensitive Info Logging in SUSE Neuvector Manager (<5.4.5)An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager containers log This issue affects neuvector: before 5.4.5. |
Neuvector
|
| CVE-2026-75036 | Sep 03, 2026 |
Fleet Helm Templating (0.12-0.16) Clusters Metadata DisclosureA security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a `GitRepo` resource can cause the Fleet controller to: - Disclose cluster metadata available to the templating context. - Reveal information about hosts reachable from the controller's network position. Because the disclosure channel is name resolution, it may remain effective in environments where outbound traffic is otherwise restricted. The disclosed information is limited to values exposed to the Fleet templating context and to name resolution results. Integrity and availability of managed clusters are not affected. This issue affects Fleet: from 0.12.0 before 0.12.19, from 0.13.0 before 0.13.15, from 0.14.0 before 0.14.10, from 0.15.0 before 0.15.6, and from 0.16.0 before 0.16.1. |
|
| CVE-2026-75035 | Sep 03, 2026 |
Rancher Manager 2.15.1 - Token Store Owner Filter Bypass (CVE-2026-75035)A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token. This issue affects Rancher: before 2.15.1. |
Rancher
|
| CVE-2026-75034 | Sep 03, 2026 |
Rancher Manager 2.15.1 SAML Assertion Replay in HA Replicas (CVE-2026-75034)A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sessions as the victim. This issue affects Rancher: before 2.15.1. |
Rancher
|
| CVE-2026-75033 | Sep 03, 2026 |
Rancher Manager <2.15.1: Project Secrets Leak via Namespace Annotation SpoofA flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that project's secrets copied into a namespace under their control. This issue affects Rancher: before 2.15.1. |
Rancher
|
| CVE-2026-71404 | Sep 03, 2026 |
Privilege Escalation in Rancher Manager <2.15.1 via GlobalRole ControllerA flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name` annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could point the annotation at any existing ClusterRole, such as `cluster-admin`, and revoke the permissions of every principal bound to it. The change persists after the malicious GlobalRole is deleted. This issue affects Rancher: before 2.15.1. |
Rancher
|
| CVE-2026-71403 | Sep 03, 2026 |
Rancher Manager <2.15.1: '/v3/users' Immutable Username/PrincipalIds BypassA flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIds` fields. A user holding the `update` verb on `users.management.cattle.io` could inject a foreign identity provider principal into any account, so that the next login by the owner of that principal was bound to the victim's account and inherited its role bindings. This issue affects Rancher: before 2.15.1. |
Rancher
|
| CVE-2026-25706 | Sep 01, 2026 |
SUSE yast2-samba-client <=5.0.4: OS Cmd Injection via AD contentImproper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain. This issue affects yast2-samba-client through 5.0.4. |
|
| CVE-2026-59681 | Sep 01, 2026 |
OS Command Injection in yast2-auth-client via Unvalidated AD ConfigA OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads testjoin invocations by interpolating configuration values into a single command string and passing that string to Open3.popen2 / Open3.capture2, which causes Ruby to run it through /bin/sh. The Organizational Unit (ou), dnshostname, AD user name and AD domain name values are neither validated nor shell-quoted. |
|
| CVE-2026-59680 | Sep 01, 2026 |
OS Command Injection in yast2-users <=5.0.8 via Password Settings TabAn OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no numeric validation, and passed the resulting string to format_days_after_epoch(). That helper interpolated the value into a shell command executed via Ruby backticks without quoting or escaping. Impact: an administrator who manages users against an external/federated LDAP directory via `yast2 users` triggers root command execution the moment they view or edit that particular user's "Password Settings" tab. No "join domain" or trust setup is required, just browsing/editing one user entry. This issue affects yast2-users through 5.0.8. |
|
| CVE-2026-71402 | Aug 27, 2026 |
wicked OOB Read in DHCPv4 Packet Capture (0.6.80)An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client (wickedd-dhcp4) reads up to ihl + 8 bytes at most 68 bytes past the end of the 1500-byte packet receive buffer. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can make the client parse adjacent heap memory as DHCP options, so that heap contents such as allocator metadata or pointer values can be interpreted into lease fields. The over-read is bounded to 68 bytes; no memory write, no attacker control over the adjacent bytes and no remote exfiltration primitive has been demonstrated. This issue affects wicked up to and including version 0.6.80. |
|
| CVE-2026-71401 | Aug 27, 2026 |
Integer Underflow in wicked DHCPv4 Client (0.6.80) Out-of-Bounds ReadAn integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80. |
|
| CVE-2026-44945 | Aug 05, 2026 |
Rancher PrivEsc via Impersonate Middleware (Pre-2.14.2)A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2. |
Rancher
|
| CVE-2026-25703 | Aug 05, 2026 |
NeuVector 5.4.9 Auth Bypass & Data Leak via /network/graph APINeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information. |
Neuvector
|
| CVE-2026-55998 | Aug 05, 2026 |
SUSE Manager: Null Pointer, Enumeration in Systemtemplate PrivateRegistryThe endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable enumeration oracle. |
Rancher
|
| CVE-2026-59675 | Aug 05, 2026 |
Rancher Manager API Body Size Bypass Leads to DoS via Audit LoggingWhen API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is bypassed for requests that pass through the audit copyReqBody path. An unauthenticated attacker can send arbitrarily large request bodies to the public login endpoints, causing the Rancher Manager server process to allocate memory proportional to the supplied body size. With just a few concurrent connections, this can exhaust available memory and terminate the Rancher Manager plane process, making the Rancher API and UI unavailable and interrupting management of all downstream clusters. |
Rancher
|
| CVE-2026-55996 | Aug 05, 2026 |
DoS via unbounded SAN growth in Rancher TLS listenersA denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured, dynamiclistener automatically appended to each serving certificate any hostname presented via Server Name Indication (SNI) in incoming TLS requests. An unauthenticated attacker with network access within the affected cluster could send a large number of TLS requests with distinct hostnames, causing the serving certificate to accumulate an unbounded number of Subject Alternative Names (SANs). Eventually, the certificate grows large enough that TLS handshakes fail with an excessive message size error, causing a denial of service on the affected listeners. |
Rancher
|
| CVE-2025-8412 | Jul 14, 2026 |
SUSE VM Driver Pack Buffer Overflow via RegistryA Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b. |
|
| CVE-2026-59674 | Jul 14, 2026 |
openSUSE Suricata <8.0.5-2.1: Symlink Escalation to RootA UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1. |
|
| CVE-2026-44938 | Jul 07, 2026 |
CVE-2026-44938: Fleet Agent Deployer NamespaceLabel InjectionA vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespace. An attacker with git push access to a Fleet-monitored repository could overwrite Pod Security Standards (PSS) enforcement labels on a target namespace. This allows the attacker to weaken admission controls and deploy workloads that PSS policies would otherwise block. |
Rancher
|
| CVE-2026-44937 | Jul 06, 2026 |
SUSE Rancher Fleet <=0.15.1 Webhook request forgery leading to DoSPotential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade attack on other repositories on the system. |
Rancher
|
| CVE-2026-44936 | Jul 06, 2026 |
Missing helmRepoURLRegex filter on SUSE Rancher Fleet 0.15 leaks BasicAuthMissing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth) to any URL specified in the helm.repo field of a fleet.yaml file, allowing attackers able to push to fleet monitored git repos to leak helm access credentials. |
Rancher
|
| CVE-2026-44934 | Jul 06, 2026 |
SUSE Rancher AI Agent 1.0 Before 1.0.2: DEBUG Log Disclosure of API KeysA information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials. |
Rancher
|
| CVE-2026-44935 | Jul 02, 2026 |
SUSE Rancher Fleet 0.15+ CrossTenant Credential Leak via valuesFromMissing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants. |
Rancher
|
| CVE-2026-44941 | Jul 02, 2026 |
libzypp Path Traversal <17.38.12 via keyhint in repomd.xmlA relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root. |
|
| CVE-2026-44948 | Jun 30, 2026 |
Path Traversal in Rancher Fleet ImageScan (0.12.0-0.15.3) DoSA path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 could be used to traverse outside of the intended directory, causing a denial of service. |
Rancher
|
| CVE-2026-44949 | Jun 30, 2026 |
Rancher FleetWorkspace (v0.7.0-0.10.7) Unauth Webhook Priv EscA Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submit a crafted admission payload and cause workspace-related Kubernetes objects to be created with attacker-chosen identity data. |
Rancher
|
| CVE-2026-44947 | Jun 30, 2026 |
Rancher PRTB Reconciler before 2.14.4 PSA retain flawA missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate. |
Rancher
|
| CVE-2026-44946 | Jun 30, 2026 |
SAML Assertion Replay in Rancher 2.14.02.14.2 ACSA SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3, |
Rancher
|
| CVE-2026-41053 | Jun 30, 2026 |
Rancher 2.13/2.14 Auth Caching Grants Admin Access to Any UserIncorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 before 2.13.6 and 2.14 before 2.14.2. |
Rancher
|
| CVE-2026-41052 | Jun 29, 2026 |
Rancher <2.14.2 Improper Privilege Escalation via Project Owner RoleImproper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10. |
Rancher
|
| CVE-2026-25707 | Jun 29, 2026 |
libzypp RPath Traversal Pre-17.38.10 Allows Remote ExploitA relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation. |
|
| CVE-2026-44939 | Jun 19, 2026 |
Command Injection in Rancher Manager < 2.14.2 Import Endpoint (YAML)A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers. |
Rancher
|
| CVE-2026-44942 | Jun 18, 2026 |
Path Traversal in libzypp <17.38.13 / 16.22.19A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content. |
|
| CVE-2025-71261 | Jun 16, 2026 |
TLS Handshake Bypass in SUSE Harvester <1.8.0 (Virtualization/Rancher Manager)An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control. |
|
| CVE-2026-44932 | Jun 16, 2026 |
Unvalidated DHCP strings in wicked <0.6.79 dhcp clientPassing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine. |
|
| CVE-2026-41054 | May 20, 2026 |
Local Privilege Escalation via haveged UNIX Socket on SUSEIn `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`. |
Rancher
Linux Enterprise Desktop
Linux Enterprise
And others... |
| CVE-2026-44933 | May 20, 2026 |
SUSE zypper PluginScript Chroot No-Op leading to host binary exec`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges. |
Linux Enterprise
|
| CVE-2026-41051 | May 13, 2026 |
Csync2 Insecure Temp Dir - TOCTOU via C99 Buildcsync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories. |
|
| CVE-2026-41050 | May 13, 2026 |
ServiceAccount Impersonation Leak in Fleet Helm Deployer (CVE-2026-41050)Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`. |
Rancher
|
| CVE-2026-25705 | May 13, 2026 |
Rancher Extensions Path Traversal in UIPlugin Enables Code InjectionA vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEndpoint` field inside a `UIPlugin` deployment. A malicious UI extension could abuse that to: * Overwrite Rancher binaries or configuration to inject code. * Write to /var/lib/rancher/ to tamper with cluster state. * If hostPath volumes are mounted, write to the host node filesystem. * Use this issue to chain with other attack vectors. |
Rancher
|
| CVE-2026-25702 | Mar 05, 2026 |
Improper Access Control in SUSE Linux Enterprise Server Kernel Breaks nftablesA Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d. |
Linux Enterprise Server
|
| CVE-2025-62879 | Mar 04, 2026 |
S3 Credentials Leak in Rancher Backup Operator LogsA vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs. |
Rancher
|
| CVE-2025-62878 | Feb 25, 2026 |
Privilege Escalation via PersistentVolume Path Manipulation in SUSE OpenShiftA malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories. |
Rancher
|
| CVE-2025-67601 | Feb 25, 2026 |
Rancher CLI CA Bypass via -skip-verify FlagA vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the cacert flag results in the CLI attempting to fetch CA certificates stored in Ranchers setting cacerts. |
Rancher
|
| CVE-2025-67860 | Feb 25, 2026 |
NeuVector Scanner Credential Leak via CLI ArgsA vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users. |
|
| CVE-2025-62877 | Jan 08, 2026 |
Harvester 1.5/1.6 Interactive Installer Exposes OS Default SSH PasswordProjects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup. |
|
| CVE-2025-66001 | Jan 08, 2026 |
NeuVector OIDC TLS SkipMITM RiskNeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks. |
Neuvector
|
| CVE-2025-62875 | Nov 20, 2025 |
Crash via Improper Check (CVE-2025-62875) in OpenSMTPD before 7.8.0p0-1.1An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1. |
|
| CVE-2025-62876 | Nov 12, 2025 |
Privilege Escalation via Unnecessary Privileges in lightdm-kde-greeter <6.0.4A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4. |
Opensuse
|