SU
Vendor
Suse
2,710
CVEs
144
On KEV
22
New 30D
Products
LE10.0
Linux Enterprise Server
Suse
476 CVEs20 on KEV0 new
RA9.9
rancher
SUSE
59 CVEs0 on KEV8 new
LE9.8
Linux Enterprise Desktop
Suse
462 CVEs37 on KEV0 new
LE9.8
Linux Enterprise Software Development Kit
Suse
297 CVEs12 on KEV0 new
LE9.8
Linux Enterprise Debuginfo
Suse
55 CVEs7 on KEV0 new
RF9.9
Rancher Fleet
Suse
12 CVEs0 on KEV5 new
LE9.8
Linux Enterprise Workstation Extension
Suse
105 CVEs14 on KEV0 new
OL6.2
openSUSE Leap 16.1
SUSE
2 CVEs0 on KEV2 new
SL6.2
SUSE Linux Enterprise Server 16.1
SUSE
2 CVEs0 on KEV2 new
SL6.2
SUSE Linux Enterprise Server for NVIDIA 16.1
SUSE
2 CVEs0 on KEV2 new
NE8.8
neuvector
SUSE
5 CVEs0 on KEV1 new
FL6.3
fleet
SUSE
2 CVEs0 on KEV1 new
ST8.0
steve
SUSE
1 CVEs0 on KEV1 new
MP9.8
Manager Proxy
Suse
19 CVEs5 on KEV0 new
LE9.8
Linux Enterprise
Suse
97 CVEs4 on KEV0 new
OC9.8
Openstack Cloud
Suse
33 CVEs4 on KEV0 new
MA9.8
Manager
Suse
22 CVEs3 on KEV0 new
MS7.8
Manager Server
Suse
12 CVEs3 on KEV0 new
LE9.8
Linux Enterprise Java
Suse
5 CVEs3 on KEV0 new
SL9.8
Suse Linux Enterprise Server
Suse
128 CVEs2 on KEV0 new
LE9.8
Linux Enterprise Real Time Extension
Suse
58 CVEs2 on KEV0 new
LE9.8
Linux Enterprise High Availability Extension
Suse
28 CVEs2 on KEV0 new
SO9.8
Studio Onsite
Suse
22 CVEs2 on KEV0 new
LE9.3
Linux Enterprise High Performance Computing
Suse
9 CVEs2 on KEV0 new
LE7.8
Linux Enterprise Real Time
Suse
7 CVEs2 on KEV0 new
ES7.8
Enterprise Storage
Suse
3 CVEs2 on KEV0 new
LE9.8
Linux Enterprise Module For Legacy
Suse
2 CVEs2 on KEV0 new
SL9.8
Suse Linux Enterprise Desktop
Suse
80 CVEs1 on KEV0 new
PH9.8
Package Hub
Suse
39 CVEs1 on KEV0 new
CP9.8
Caas Platform
Suse
7 CVEs1 on KEV0 new
LE7.8
Linux Enterprise Server For Sap
Suse
6 CVEs1 on KEV0 new
LE9.8
Linux Enterprise Live Patching
Suse
3 CVEs1 on KEV0 new
LE8.1
Linux Enterprise Micro
Suse
3 CVEs1 on KEV0 new
OC7.8
Openstack Cloud Crowbar
Suse
3 CVEs1 on KEV0 new
SL5.5
Suse Linux Enterprise High Availability Extension
Suse
3 CVEs1 on KEV0 new
MR7.8
Manager Retail Branch Server
Suse
2 CVEs1 on KEV0 new
BM7.8
Basesystem Module
Suse
1 CVEs1 on KEV0 new
DT7.8
Development Tools Module
Suse
1 CVEs1 on KEV0 new
LM7.8
Legacy Module
Suse
1 CVEs1 on KEV0 new
LE7.5
Linux Enterprise Module For Containers
Suse
1 CVEs1 on KEV0 new
LM7.8
Linux Micro
Suse
1 CVEs1 on KEV0 new
PC7.8
Public Cloud Module
Suse
1 CVEs1 on KEV0 new
RM7.8
Realtime Module
Suse
1 CVEs1 on KEV0 new
SL9.8
Suse Linux
Suse
207 CVEs0 on KEV0 new
SL9.8
Suse Linux Enterprise Software Development Kit
Suse
34 CVEs0 on KEV0 new
LE–
Linux Enterprise Sdk
Suse
19 CVEs0 on KEV0 new
SL–
Suse Linux Workstation Extension
Suse
17 CVEs0 on KEV0 new
LE9.8
Linux Enterprise Point OF Sale
Suse
12 CVEs0 on KEV0 new
OP9.8
openSUSE
SUSE
6 CVEs0 on KEV0 new
SE–
Suse Email Server
Suse
6 CVEs0 on KEV0 new
SL–
Suse Linux Connectivity Server
Suse
6 CVEs0 on KEV0 new
SL–
Suse Linux Database Server
Suse
6 CVEs0 on KEV0 new
SL–
Suse Linux Office Server
Suse
6 CVEs0 on KEV0 new
SE–
Studio Extension For System Z
Suse
5 CVEs0 on KEV0 new
SU7.8
supportutils
SUSE
5 CVEs0 on KEV0 new
SL–
Suse Linux Admin-cd For Firewall
Suse
5 CVEs0 on KEV0 new
SL–
Suse Linux Firewall CD
Suse
5 CVEs0 on KEV0 new
OT7.8
openSUSE Tumbleweed
SUSE
4 CVEs0 on KEV0 new
WE–
Webyast
Suse
4 CVEs0 on KEV0 new
KI–
Kiwi
Suse
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104618 | OL openSUSE Leap 16.1 SUSE | 6.2 | Oct 15 | sdbootutil: world-readable debug log |
| CVE-2026-104617 | SL SUSE Linux Enterprise Server 16.1 SUSE | 5.1 | Oct 15 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline |
| CVE-2023-32198 | ST steve SUSE | 8.0 | Oct 15 | Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks |
| CVE-2024-22031 | RA rancher SUSE | 8.5 | Oct 15 | Rancher users who can create Projects can gain access to arbitrary projects |
| CVE-2025-23390 | FL fleet SUSE | 6.3 | Oct 15 | Fleet doesn’t validate a server’s certificate when connecting through SSH |
| CVE-2026-88804 | RA Rancher SUSE | 9.6 | Sep 28 | Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher |
| CVE-2026-88805 | RA Rancher SUSE | 8.1 | Sep 28 | Session Not Revoked Server-Side on Logout in Rancher |
| CVE-2026-88808 | RA Rancher SUSE | 8.8 | Sep 28 | Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters |
| CVE-2026-93540 | RA Rancher SUSE | 6.5 | Sep 28 | Fleet applies namespace labels and annotations without the bundle's service account privileges |
| CVE-2026-93539 | RA Rancher SUSE | 5.4 | Sep 28 | Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver |
| CVE-2026-93538 | RA Rancher SUSE | 7.1 | Sep 28 | Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet |
| CVE-2026-93537 | RA Rancher SUSE | 6.5 | Sep 28 | Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory |
| CVE-2026-78424 | NE NeuVector SUSE | 8.8 | Sep 28 | OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes |
| CVE-2026-78427 | GI github.com/neuvector/neuvector SUSE | 5.3 | Sep 17 | Admission Control Bypass via Hardcoded Sidecar Image Exemption |
| CVE-2026-78425 | GI github.com/neuvector/neuvector SUSE | 7.6 | Sep 17 | SAML Audience Confusion Allows Cross-SP Authentication |
| CVE-2026-78426 | NE neuvector SUSE | 2.0 | Sep 17 | Logout bypass via alternate JWT spelling |
| CVE-2026-78428 | NE neuvector SUSE | 8.8 | Sep 17 | Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently |
| CVE-2026-44940 | SO SUSE Observability SUSE | 5.7 | Sep 17 | Service token exposure and potential privilege escalation in SUSE Observability |
| CVE-2026-44950 | IS Image SLES15-SP6-SAP-EC2 SUSE | 9.0 | Sep 10 | fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 |
| CVE-2026-59679 | SL SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE | 9.0 | Sep 10 | fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 |
| CVE-2025-46808 | NE neuvector SUSE | 6.8 | Sep 9 | Sensitive information is leaked into NeuVector’s manager container logs |
| CVE-2026-75036 | FL Fleet SUSE | 4.3 | Sep 3 | Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing |
| CVE-2026-75035 | RA Rancher SUSE | 6.5 | Sep 3 | Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass |
| CVE-2026-75034 | RA Rancher SUSE | 7.4 | Sep 3 | Rancher: SAML Assertion Replay |
| CVE-2026-75033 | RA Rancher SUSE | 7.7 | Sep 3 | Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing |
| CVE-2026-71404 | RA Rancher SUSE | 8.7 | Sep 3 | Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole |
| CVE-2026-71403 | RA Rancher SUSE | 6.1 | Sep 3 | Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind |
| CVE-2026-25706 | YA yast2-samba-client SUSE | 7.5 | Sep 1 | yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) |
| CVE-2026-59681 | YA yast2-auth-client SUSE | 8.8 | Sep 1 | yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join |
| CVE-2026-59680 | YA yast2-users SUSE | 8.0 | Sep 1 | yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute |
| CVE-2026-71402 | WI wicked SUSE | 5.4 | Aug 27 | wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length |
| CVE-2026-71401 | WI wicked SUSE | 5.3 | Aug 27 | wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read |
| CVE-2026-44945 | RA Rancher SUSE | 9.1 | Aug 5 | Cross-Cluster Impersonation Confused-Deputy Privilege Escalation |
| CVE-2026-25703 | NE NeuVector SUSE | 7.3 | Aug 5 | Potential information leakage from manager /network/graph API in NeuVector |
| CVE-2026-55998 | RA Rancher SUSE | 5.3 | Aug 5 | Cluster Existence Oracle via Unauthenticated Import Endpoint |
| CVE-2026-59675 | RA Rancher SUSE | 7.5 | Aug 5 | Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service |
| CVE-2026-55996 | RA Rancher SUSE | 4.3 | Aug 5 | Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-cluster-agent |
| CVE-2025-8412 | VM Virtual Machine Driver Pack SUSE | 2.0 | Jul 14 | VMDP: Potential buffer overflow in the RtlQueryRegistryValues function |
| CVE-2026-59674 | OT openSUSE Tumbleweed SUSE | 7.1 | Jul 14 | LPE from suricata user to root due to chown in %post in suricata packaging |
| CVE-2026-44938 | RA Rancher SUSE | 8.8 | Jul 7 | Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent |
| CVE-2026-44937 | RA Rancher SUSE | 8.2 | Jul 6 | SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components |
| CVE-2026-44936 | RA Rancher SUSE | 5.0 | Jul 6 | Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml |
| CVE-2026-44934 | RA Rancher SUSE | 7.0 | Jul 6 | Exposed tokens in SUSE Rancher AI Agent logs |
| CVE-2026-44935 | RA Rancher SUSE | 9.9 | Jul 2 | Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer |
| CVE-2026-44941 | LI libzypp SUSE | 8.8 | Jul 2 | libzypp path traversal via "keyhint" in repomd.xml |
| CVE-2026-44948 | RA Rancher SUSE | 4.9 | Jun 30 | Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler |
| CVE-2026-44949 | RA Rancher SUSE | 7.0 | Jun 30 | Unauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook |
| CVE-2026-44947 | RA Rancher SUSE | 6.9 | Jun 30 | Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher |
| CVE-2026-44946 | RA Rancher SUSE | 7.4 | Jun 30 | SAML Authentication Replay in Rancher |
| CVE-2026-41053 | RA Rancher SUSE | 8.8 | Jun 30 | Over-inclusive team membership expansion in GitHub App authentication provider for Rancher |
| CVE-2026-41052 | RA Rancher SUSE | 8.8 | Jun 29 | Rancher Privilege Escalation from Project Owner to Host |
| CVE-2026-25707 | LI libzypp SUSE | 8.8 | Jun 29 | Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp |
| CVE-2026-44939 | RA Rancher SUSE | 9.4 | Jun 19 | Command injection through unsanitized YAML parameter in Rancher |
| CVE-2026-44942 | LI libzypp SUSE | 6.5 | Jun 18 | libzypp .repo files can have an optional path which can lead to path traversal attacks |
| CVE-2025-71261 | HA Harvester SUSE | 8.6 | Jun 16 | Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOS |
| CVE-2026-44932 | WI wicked SUSE | 8.8 | Jun 16 | indirect remote shell command injection via unsanitized DHCP options in wicked |
| CVE-2026-44543 | LP Local Path Provisioner Suse | 8.7 | May 28 | Local Path Provisioner: HelperPod Template Injection |
| CVE-2026-41054 | CS Container suse/sle-micro-rancher/5.3:latest SUSE | 7.8 | May 20 | Missing exit out of permission check in haveged could lead to root exploit |
| CVE-2026-44933 | OP openSUSE SUSE | 7.8 | May 20 | Path Traversal in Plugin Loading in libzypp |
| CVE-2026-41051 | OT openSUSE Tumbleweed SUSE | 5.0 | May 13 | csync2 uses insecure temporary directories when compiled with C99 or later |