SSRF in Suse Rancher
CVE-2026-44937
Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of serv…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Suse Rancher — versions 0.15.0, 0.14.0, 0.13.0
Weakness classification (CWE)
References
- meissner@suse.de (vendor-advisory)