https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:07:47.662777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01561 bdu:2025-01561 2026-10-03T07:07:47.761037+00:00 bdu:2025-01561 https://cve.radiocsirt.org/vuln/euvd-2026-273002 EUVD-2026-273002 2026-10-03T07:07:47.761094+00:00 EUVD-2026-273002 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52281 fkie_cve-2024-52281 2026-10-03T07:07:47.761119+00:00

A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4.

 https://cve.radiocsirt.org/vuln/ghsa-2v2w-8v8c-wcm9 GHSA-2v2w-8v8c-wcm9 — Rancher UI has Stored Cross-site Scripting vulnerability 2026-10-03T07:07:47.761169+00:00

Affected: Go: github.com/rancher/rancher

### Impact A vulnerability has been identified within Rancher UI that allows a malicious actor to perform a Stored XSS attack through the cluster description field.

Please consult the associated [MITRE ATT&CK - Technique - Drive-by Compromise](https://attack.mitre.org/techniques/T1189/) for further information about this category of attack.

### Patches The fix introduces new changes in the directives responsible for sanitizing HTML code before rendering.

We replaced the `v-tooltip` directive with the `v-clean-tooltip` directive.

Patched versions include releases `2.9.4` and `2.10.0`.

### Workarounds There are no workarounds for this issue. Users are recommended to upgrade, as soon as possible, to a version of /Rancher Manager which contains the fixes.

### Credits This issue was identified and reported by Bhavin Makwana from Workday’s Cyber Defence Team.

### For more information If you have any questions or comments about this advisory: - Reach out to the [SUSE Rancher Security team](https://github.com/rancher/rancher/security/policy) for security related inquiries. - Open an issue in the [Rancher](https://github.com/rancher/rancher/issues/new/choose) repository. - Verify with our [support matrix](https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/) and [product support lifecycle](https://www.suse.com/lifecycle/).

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14653-1 openSUSE-SU-2025:14653-1 — govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media 2026-10-03T07:07:47.761241+00:00

govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0297-1 SUSE-SU-2025:0297-1 — Security update for govulncheck-vulndb 2026-10-03T07:07:47.761279+00:00

Security update for govulncheck-vulndb

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0075 WID-SEC-W-2025-0075 — Rancher: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T07:07:47.761354+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Rancher ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.