CVE-2026-88811

EUVD-2026-115330
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud providers. This affects SUSE Rancher 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11,
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
suseCNA
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
suserancher
2.15.0 ≤
𝑥
< 2.15.3
CNA
suserancher
2.14.0 ≤
𝑥
< 2.14.7
CNA
suserancher
2.13.0 ≤
𝑥
< 2.13.11
CNA
suserancher
2.12.0 ≤
𝑥
< 2.12.15
CNA
suserancher
2.11.0 ≤
𝑥
< 2.11.19
CNA