CVE-2026-44937
EUVD-2026-4186706.07.2026, 11:16
Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade attack on other repositories on the system.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| suse | rancher_fleet | 0.12.0 ≤ 𝑥 < 0.12.15 |
| suse | rancher_fleet | 0.13.0 ≤ 𝑥 < 0.13.11 |
| suse | rancher_fleet | 0.14.0 ≤ 𝑥 < 0.14.6 |
| suse | rancher_fleet | 0.15.0 ≤ 𝑥 < 0.15.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| suse | rancher | 0.15.0 ≤ 𝑥 < 0.15.2 | CNA |
| suse | rancher | 0.14.0 ≤ 𝑥 < 0.14.6 | CNA |
| suse | rancher | 0.13.0 ≤ 𝑥 < 0.13.11 | CNA |
| suse | rancher | 0.12.0 ≤ 𝑥 < 0.12.15 | CNA |