https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:25:29.361406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25320 CVE-2021-25320 — Rancher: Cloud credentials can be used through proxy API by users without access 2026-10-08T22:25:29.377580+00:00

Affected: Rancher

A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.