https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:39:57.219259+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-196015 EUVD-2026-196015 2026-10-08T16:39:57.284069+00:00 EUVD-2026-196015 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22649 fkie_cve-2023-22649 2026-10-08T16:39:57.284107+00:00

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log) is an opt-in feature, only deployments that have it enabled and have [AUDIT_LEVEL](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log#audit-log-levels) set to `1 or above` are impacted by this issue.

 https://cve.radiocsirt.org/vuln/ghsa-xfj7-qf8w-2gcr GHSA-xfj7-qf8w-2gcr — Rancher 'Audit Log' leaks sensitive information 2026-10-08T16:39:57.284144+00:00

Affected: Go: github.com/rancher/rancher

### Impact

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log) is an opt-in feature, only deployments that have it enabled and have [AUDIT_LEVEL](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log#audit-log-levels) set to `1 or above` are impacted by this issue.

The leaks might be caught in the audit logs upon these actions:

- Creating cloud credentials or new authentication providers. It is crucial to note that **all** [authentication providers](https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config#external-vs-local-authentication) (such as AzureAD) and [cloud providers](https://ranchermanager.docs.rancher.com/pages-for-subheaders/set-up-cloud-providers) (such as Google) are impacted. - Downloading a kubeconfig file from a downstream or a local cluster. - Logging in/out from Rancher.

The affected data may include the following:

- HTTP headers

Field | Location -- | -- X-Api-Auth-Header | Request header X-Api-Set-Cookie-Header | Response header X-Amz-Security-Token | Request header credentials | Request body applicationSecret | Request Body oauthCredential | Request Body serviceAccountCredential | Request Body spKey | Request Body spCert | Request body spCert | Response body certificate | Request body privateKey | Request…

 https://cve.radiocsirt.org/vuln/gsd-2023-22649 gsd-2023-22649 2026-10-08T16:39:57.284199+00:00 gsd-2023-22649 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0332 WID-SEC-W-2024-0332 — Rancher: Mehrere Schwachstellen 2026-10-08T16:39:57.284213+00:00

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Informationen offenzulegen, XSS-Angriffe durchzuführen oder seine Privilegien zu erweitern.