https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:09:52.545619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348469 EUVD-2026-348469 2026-10-04T04:09:52.580029+00:00 EUVD-2026-348469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55998 fkie_cve-2026-55998 2026-10-04T04:09:52.580077+00:00

The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/private_registry.go causes the request to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint returns HTTP 200. This observable difference in response codes constitutes a reliable enumeration oracle.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2600 WID-SEC-W-2026-2600 — Rancher: Mehrere Schwachstellen 2026-10-04T04:09:52.580117+00:00

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.