RA
Product
rancher
59
CVEs
0
On KEV
9.9
Max CVSS
8
New 30D
Severity mix
Critical 11High 30Medium 18Low 0
Watch
Add rancher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13209 | 6.1 | Sep 4 | Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher Affected: 2.0.0 through 2.2.4 |
| CVE-2026-93539 | 5.4 | Sep 28 | Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver Affected: 0.16.0 before 0.16.2 |
| CVE-2021-4200 | 5.4 | May 2 | A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled Affected: before 2.5.13; 2.6.0 before 2.6.4 |
| CVE-2026-55998 | 5.3 | Aug 5 | Cluster Existence Oracle via Unauthenticated Import Endpoint Affected: 2.14.0 before 2.14.4; 2.13.0 before 2.13.8; 2.12.0 before 2.12.12; 2.11.0 before 2.11.16 |
| CVE-2026-44936 | 5.0 | Jul 6 | Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml Affected: 0.15.0 before 0.15.2; 0.14.0 before 0.14.6; 0.13.0 before 0.13.11; 0.12.0 before 0.12.15 |
| CVE-2026-44948 | 4.9 | Jun 30 | Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler Affected: 0.12.0 before 0.12.16; 0.13.0 before 0.13.12; 0.14.0 before 0.14.7; 0.15.0 before 0.15.3 |
| CVE-2025-67601 | 4.8 | Feb 25 | A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also… Affected: 2.10.0 before 2.10.11; 2.11.0 before 2.11.10; 2.12.0 before 2.12.6; 2.13.0 before 2.13.2 |
| CVE-2019-11881 | 4.7 | Jun 10 | A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special… Affected: 2.1.4 |
| CVE-2026-55996 | 4.3 | Aug 5 | Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent Affected: 2.11.0 before 2.11.16; 2.12.0 before 2.12.12; 2.13.0 before 2.13.8; 2.14.0 before 2.14.4 |