RF
Product
Rancher Fleet
12
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Severity mix
Critical 2High 4Medium 6Low 0
Watch
Add Rancher Fleet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44935 | 9.9 | Jul 2 | Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer Affected: 0.12.0 before 0.12.15; 0.13.0 before 0.13.11; 0.14.0 before 0.14.6; 0.15.0 before 0.15.2 |
| CVE-2026-41050 | 9.9 | May 13 | Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering Affected: 0.11.0 before 0.11.13; 0.12.0 before 0.12.14; 0.13.0 before 0.13.10; 0.14.0 before 0.14.5; 0.15.0 before 0.15.1 |
Showing 2
