https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:36:10.266970+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363501 EUVD-2026-363501 2026-10-02T12:36:10.283889+00:00 EUVD-2026-363501 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71404 fkie_cve-2026-71404 2026-10-02T12:36:10.283924+00:00

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name` annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could point the annotation at any existing ClusterRole, such as `cluster-admin`, and revoke the permissions of every principal bound to it. The change persists after the malicious GlobalRole is deleted.

This issue affects Rancher: before 2.15.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3073 WID-SEC-W-2026-3073 — Rancher: Mehrere Schwachstellen 2026-10-02T12:36:10.283961+00:00

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.