https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:21:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03876 bdu:2025-03876 https://cve.radiocsirt.org/vuln/bdu:2025-03876 https://cve.radiocsirt.org/vuln/euvd-2026-273070 EUVD-2026-273070 https://cve.radiocsirt.org/vuln/euvd-2026-273070 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23391 <p>A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.</p> <p>A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23391 https://cve.radiocsirt.org/vuln/ghsa-8p83-cpfg-fj3g <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact A vulnerability has been identified within Rancher where a Restricted Administrator can change the password of Administrators and take over their accounts.</p> <p>A Restricted Administrator should be not allowed to change the password of more privileged users unless it contains the Manage Users permissions.</p> <p>Rancher deployments where the Restricted Administrator role is not being used are not affected by this CVE. Please consult the associated [MITRE ATT&amp;CK - Technique - Abuse Elevation Control Mechanism](https://attack.mitre.org/techniques/T1548/) for further information about this category of attack.</p> <p>### Patches The fix introduces a few changes: 1. If the user has a manage-users verb, the user is allowed to edit/delete users. That way the Manage Users built in role will still be able to edit ALL users. 2. If the user doesn&#39;t have manage-users, just edit or delete, then there is a check to ensure that the User being edited only has rules equal to or less than the editor.</p> <p>Patched versions include releases `v2.8.14`, `v2.9.8`, `v2.10.4` and `v2.11.0`</p> <p>### Workarounds Users are recommended to upgrade, as soon as possible, to a version of Rancher Manager that contains the fix. If users can&#39;t upgrade, the following are recommended: 1. Limit access to Rancher Restricted Admin only to trusted users. 2. Downgrade Restricted Administrators to custom roles with limited permissions.</p> <p>### Credits This issue was identified and reported by Xavier Duthil from OVHcloud.</p> <p>### Refer…</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact A vulnerability has been identified within Rancher where a Restricted Administrator can change the password of Administrators and take over their accounts.</p> <p>A Restricted Administrator should be not allowed to change the password of more privileged users unless it contains the Manage Users permissions.</p> <p>Rancher deployments where the Restricted Administrator role is not being used are not affected by this CVE. Please consult the associated [MITRE ATT&amp;CK - Technique - Abuse Elevation Control Mechanism](https://attack.mitre.org/techniques/T1548/) for further information about this category of attack.</p> <p>### Patches The fix introduces a few changes: 1. If the user has a manage-users verb, the user is allowed to edit/delete users. That way the Manage Users built in role will still be able to edit ALL users. 2. If the user doesn&#39;t have manage-users, just edit or delete, then there is a check to ensure that the User being edited only has rules equal to or less than the editor.</p> <p>Patched versions include releases `v2.8.14`, `v2.9.8`, `v2.10.4` and `v2.11.0`</p> <p>### Workarounds Users are recommended to upgrade, as soon as possible, to a version of Rancher Manager that contains the fix. If users can&#39;t upgrade, the following are recommended: 1. Limit access to Rancher Restricted Admin only to trusted users. 2. Downgrade Restricted Administrators to custom roles with limited permissions.</p> <p>### Credits This issue was identified and reported by Xavier Duthil from OVHcloud.</p> <p>### Refer…</p> https://cve.radiocsirt.org/vuln/ghsa-8p83-cpfg-fj3g https://cve.radiocsirt.org/vuln/opensuse-su-2025:14970-1 <p>govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14970-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0665 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Rancher ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Rancher ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0665