https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:57:36.350445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348799 EUVD-2026-348799 2026-10-04T12:57:36.384680+00:00 EUVD-2026-348799 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44945 fkie_cve-2026-44945 2026-10-04T12:57:36.384716+00:00

A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it manages.

This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2600 WID-SEC-W-2026-2600 — Rancher: Mehrere Schwachstellen 2026-10-04T12:57:36.384753+00:00

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.