Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how rancher compares to other vendors in security performance

View Risk Score →

Rancher RancherCross-Cluster Impersonation Confused-Deputy Privilege Escalation

Risk 72
Severity
9.1
First published (updated )
CVE-2026-44945

Rancher Fleet ImageScan subsystemPath Traversal in Rancher Fleet ImageScan GitRepo Path Handler

Risk 26
Severity
5.3
First published (updated )
CVE-2026-44948

Rancher FleetWorkspaceUnauthenticated namespace creation and RBAC injection via rancher-webhook FleetWorkspace mutating webhook

Risk 38
Severity
7
First published (updated )
CVE-2026-44949

Rancher RancherStale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

Risk 35
Severity
6.9
First published (updated )
CVE-2026-44947

go/github.com/rancher/rancherOver-inclusive team membership expansion in GitHub App authentication provider for Rancher

Risk 79
Severity
8.8
First published (updated )
CVE-2026-41053
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/rancher/rancherCommand injection through unsanitized YAML parameter in Rancher

Risk 80
Severity
9.4
First published (updated )
CVE-2026-44939

go/github.com/rancher/rancherSteve API proxy impersonation

Risk 82
Severity
8.8
First published (updated )
CVE-2021-36776

go/github.com/rancher/rancherDeleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings

Risk 82
Severity
8.8
First published (updated )
CVE-2021-36775

go/github.com/rancher/rancherRancher: Privilege escalation vulnerability via malicious Connection header

Risk 82
Severity
8.8
First published (updated )
CVE-2021-31999

Rancher RancherRancher: Cloud credentials can be used through proxy API by users without access

Risk 83
Severity
10
First published (updated )
CVE-2021-25320
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/rancher/rancherrancher: API group not properly specified when creating Kubernetes RBAC resources

Risk 82
Severity
8.8
First published (updated )
CVE-2021-25318

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203