Login Request a demo
TU
Product
Tumbleweed
by openSUSE · last CVE Oct 15, 2026
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
10.0
Max CVSS
2
New 30D
Vulnerabilities7In the news3Timeline
Severity mix
Critical 1High 3Medium 3Low 0
Severity
All severities7Critical1High3Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Tumbleweed to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-32183
7.8
0%
Jul 7
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE…
Affected: All versions, or not specified
CVE-2022-31250
7.8
0%
Jul 20
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root
Affected: before 6.4.2-1.1
CVE-2020-8026
7.8
0%
Aug 7
A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new…
Affected: through 2.6.2-4.2
Showing 3