Login Request a demo
RF
Product
Rancher Fleet
by Suse · last CVE Sep 28, 2026
12
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 2High 4Medium 6Low 0
Severity
All severities12Critical2High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rancher Fleet to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-88808
8.8
0%
Sep 28
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
Affected: 0.14.0 before 0.14.11; 0.15.0 before 0.15.7; 0.16.0 before 0.16.2
CVE-2026-44938
8.8
0%
Jul 7
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
Affected: 0.12.0 before 0.12.15; 0.13.0 before 0.13.11; 0.14.0 before 0.14.6; 0.15.0 before 0.15.2
CVE-2026-44937
8.2
0%
Jul 6
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
Affected: 0.12.0 before 0.12.15; 0.13.0 before 0.13.11; 0.14.0 before 0.14.6; 0.15.0 before 0.15.2
CVE-2026-93538
7.1
0%
Sep 28
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
Affected: 0.12.0 before 0.12.19; 0.13.0 before 0.13.15; 0.14.0 before 0.14.10; 0.15.0 before 0.15.6; 0.16.0 before 0.16.1
Showing 4