https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:18:38.105248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00184 bdu:2025-00184 2026-10-03T19:18:38.208217+00:00 bdu:2025-00184 https://cve.radiocsirt.org/vuln/euvd-2026-272997 EUVD-2026-272997 2026-10-03T19:18:38.208254+00:00 EUVD-2026-272997 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32197 fkie_cve-2023-32197 2026-10-03T19:18:38.208268+00:00

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5.

 https://cve.radiocsirt.org/vuln/ghsa-7h8m-pvw3-5gh4 GHSA-7h8m-pvw3-5gh4 — Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists 2026-10-03T19:18:38.208297+00:00

Affected: Go: github.com/rancher/rancher

### Impact

A vulnerability has been identified whereby Rancher Manager deployments containing Windows nodes have weak Access Control Lists (ACL), allowing `BUILTIN\Users` or `NT AUTHORITY\Authenticated Users` to view or edit sensitive files which could lead to privilege escalation.

The affected files include binaries, scripts, configuration and log files:

``` C:\etc\rancher\wins\config C:\var\lib\rancher\agent\rancher2_connection_info.json C:\etc\rancher\rke2\config.yaml.d\50-rancher.yaml C:\var\lib\rancher\agent\applied\*-*-applied.plan C:\usr\local\bin\rke2 C:\var\lib\rancher\capr\idempotence\idempotent.sh ```

RKE2 nodes expand the list to include the files below:

``` C:\etc\rancher\node\password C:\var\lib\rancher\rke2\agent\logs\kubelet.log C:\var\lib\rancher\rke2\data\v1.**.**-rke2r*-windows-amd64-*\bin\* C:\var\lib\rancher\rke2\bin\* ```

**This vulnerability is exclusive to deployments that contain Windows nodes. Linux-only environments are not affected by it.**

Please consult the associated [MITRE ATT&CK - Technique - Exploitation for Privilege Escalation](https://attack.mitre.org/techniques/T1068/) for further information about this category of attack.

### Patches

Patched versions include Rancher Manager `2.8.9` and `2.9.3`. For RKE2 Windows nodes, please refer to its [specific advisory](https://github.com/rancher/rke2/security/advisories/GHSA-x7xj-jvwp-97rv). No patches are available for 2.7, therefore users are urged to upgrade to newer minor versions or t…

 https://cve.radiocsirt.org/vuln/gsd-2023-32197 gsd-2023-32197 2026-10-03T19:18:38.208349+00:00 gsd-2023-32197 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 openSUSE-SU-2024:0350-1 — Security update for govulncheck-vulndb 2026-10-03T19:18:38.208362+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 SUSE-SU-2024:3911-1 — Security update for govulncheck-vulndb 2026-10-03T19:18:38.208403+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3273 WID-SEC-W-2024-3273 — Rancher: Mehrere Schwachstellen 2026-10-03T19:18:38.208441+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und beliebigen Code auszuführen.