Login Request a demo
RA
Product
rancher
by rancher · last CVE Aug 5, 2026
6
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 0
Severity
All severities6Critical1High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rancher to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25320
9.9
1%
Jul 15
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID
Affected: before 2.4.16; 2.5.0 before 2.5.9
CVE-2026-55997
8.8
0%
Aug 5
Long-lived Rancher registration token exposed in plaintext
Affected: 2.14.0 before 2.14.4; 2.13.0 before 2.13.8
CVE-2021-36776
8.8
1%
Apr 4
A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users
Affected: before 2.5.10
CVE-2021-36775
8.8
1%
Apr 4
a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked
Affected: before 2.4.18; 2.5.0 before 2.5.12; 2.6.0 before 2.6.3
CVE-2021-31999
8.8
1%
Jul 15
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User"…
Affected: before 2.4.16; 2.5.0 before 2.5.9
CVE-2021-25318
8.8
1%
Jul 15
A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to
Affected: before 2.4.16; 2.5.0 before 2.5.9
Showing 6