https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:07:20.091041+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364145 EUVD-2026-364145 2026-10-02T09:07:20.093201+00:00 EUVD-2026-364145 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75035 fkie_cve-2026-75035 2026-10-02T09:07:20.093232+00:00

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token.

This issue affects Rancher: before 2.15.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3073 WID-SEC-W-2026-3073 — Rancher: Mehrere Schwachstellen 2026-10-02T09:07:20.093265+00:00

Ein Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.