https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:12:33.017202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00182 bdu:2025-00182 2026-10-03T18:12:33.185942+00:00 bdu:2025-00182 https://cve.radiocsirt.org/vuln/euvd-2026-201093 EUVD-2026-201093 2026-10-03T18:12:33.186033+00:00 EUVD-2026-201093 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45157 fkie_cve-2022-45157 2026-10-03T18:12:33.186065+00:00

A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments.

 https://cve.radiocsirt.org/vuln/ghsa-xj7w-r753-vj8v GHSA-xj7w-r753-vj8v — Exposure of vSphere's CPI and CSI credentials in Rancher 2026-10-03T18:12:33.186123+00:00

Affected: Go: github.com/rancher/rancher

### Impact

A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments.

The exposed passwords were accessible in the following objects:

- Can be accessed by users that are cluster members of the provisioned clusters: - When provisioning a new cluster with the vSphere cloud provider through Rancher's UI (user interface), Cluster Templates and Terraform on the object `provisioning.cattle.io` in `spec.rkeConfig.chartValues.rancher-vsphere-cpi` and `spec.rkeConfig.chartValues.rancher-vsphere-csi`. - On the object `rke.cattle.io.rkecontrolplane` in `spec.chartValues.rancher-vsphere-cpi` and `spec.chartValues.rancher-vsphere-csi`. - Can be accessed by users with privileged access to the clusters' infrastructure (host OS): - Inside the `plan` files in the provisioned downstream clusters' filesystems.

**Note:** if you believe that the vSphere credentials might have been accessed by unauthorized users, it's highly recommended to change them, after updating Rancher to a patched version.

Please consult the associated [MITRE ATT&CK - Technique - Credential Access](https://attack.mitre.org/tactics/TA0006/) for further informat…

 https://cve.radiocsirt.org/vuln/gsd-2022-45157 gsd-2022-45157 2026-10-03T18:12:33.186222+00:00 gsd-2022-45157 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 openSUSE-SU-2024:0350-1 — Security update for govulncheck-vulndb 2026-10-03T18:12:33.186272+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 SUSE-SU-2024:3911-1 — Security update for govulncheck-vulndb 2026-10-03T18:12:33.186380+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3273 WID-SEC-W-2024-3273 — Rancher: Mehrere Schwachstellen 2026-10-03T18:12:33.186474+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und beliebigen Code auszuführen.