{"vulnerability": "cve-2026-4494", "sightings": [{"uuid": "6e8100d9-d0fc-48e7-9ae4-4a1d13636a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhjk23fg7k2u", "content": "", "creation_timestamp": "2026-03-20T22:13:53.759014Z"}, {"uuid": "24a6a7c4-6cbc-4e3c-89bd-d67205955d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44946", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2hpap2gs2o", "content": "\u30b3\u30f3\u30c6\u30ca\u7ba1\u7406\u30c4\u30fc\u30eb\u300cRancher\u300d\u306b\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u30b3\u30f3\u30c6\u30ca\u7ba1\u7406\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cRancher\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3068\u3057\u3066\u3001SUSE\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-44946\u300d\u306f\u3001\u300cRancher\u300d\u306eSAML\u8a8d\u8a3c\u306b\u304a\u3044\u3066\u3001\u4e2d\u9593\u8005\u653b\u6483\u306b\u3088\u308a\u300cSAML\u30a2\u30b5\u30fc\u30b7\u30e7\u30f3\u300d\u3092\u518d\u5229\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u3002\u6709\u52b9\u306a\u7f72\u540d\u6e08\u307fSAML\u30ec\u30b9\u30dd\u30f3\u30b9\u3068\u3001\u4e8b\u524d\u8a8d\u8a3cSAML\u30b9\u30c6\u30fc\u30c8\u306eCookie\u3092\u53d6\u5f97\u3067\u304d\u308b\u5834\u5408\u306b\u3001\u5225\u306e\u8a8d\u8a3c\u6e08\u307f\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u4f5c\u6210\u3067\u304d\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-08-01T21:59:15.516269Z"}, {"uuid": "b11ffce3-0c03-422b-baee-d8bd3710b5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44945", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdcpujkg723", "content": "CVE-2026-44945 - rancher\nA specific type of user in Rancher can gain full control over the system and all clusters it manages. This means they can make changes to the system and its clusters without needing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rancher #suse #CVE #infosec", "creation_timestamp": "2026-08-05T10:24:04.084756Z"}, {"uuid": "413709dd-670c-49f0-8f92-b1f5d7aea621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44945", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117042434875220625", "content": "SUSE Rancher CVE-2026-44945 (CRITICAL, CVSS 9.1): Privilege escalation flaw lets authenticated users with default global role gain full admin on Rancher & clusters. Restrict access & monitor pending patch. https://radar.offseq.com/threat/cve-2026-44945-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-suse-rancher-9a7358d4ec1c0d9c #OffSeq #infosec #CVE202644945 #Kubernetes", "creation_timestamp": "2026-08-05T10:30:26.343143Z"}, {"uuid": "883e544d-c0df-4948-9a9a-efe3cfeb0b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44945", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msdd3bxvqd2t", "content": "CVE-2026-44945: CRITICAL bug in SUSE Rancher lets authenticated users with default roles escalate to full admin across clusters. Restrict access & watch for patch updates. https://radar.offseq.com/threat/cve-2026-44945-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-suse-rancher-9a735...", "creation_timestamp": "2026-08-05T10:30:28.373127Z"}, {"uuid": "48cadecd-f591-4f9d-97a9-c251e3c781d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/adx4khar4lmon", "content": "CVE-2026-44945 - Cross-Cluster Impersonation Confused-Deputy Privilege Escalation\nCVE ID : CVE-2026-44945\n \n Published : Aug. 5, 2026, 10 a.m. | 17\u00a0minutes ago\n \n Description : A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests...", "creation_timestamp": "2026-08-05T10:44:49.625572Z"}, {"uuid": "1f74c37e-36ee-45bb-8bbb-f1eb9345f408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moksjaduu422", "content": "CVE-2026-44942 - libzypp .repo files can have an optional path which can lead to path traversal attacks\nCVE ID : CVE-2026-44942\n \n Published : June 18, 2026, 9:57 a.m. | 1\u00a0hour, 39\u00a0minutes ago\n \n Description : A path traversal in handling the \"path\" component of .repo files pr...", "creation_timestamp": "2026-06-18T12:14:35.417866Z"}, {"uuid": "81fe7335-e233-491c-9574-c7c4b556280d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5usfmcc2z", "content": "CVE-2026-44946 - SAML Authentication Replay in Rancher\nCVE ID : CVE-2026-44946\n \n Published : June 30, 2026, 12:14 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A SAML authentication replay vulnerability in Rancher's Assertion\n Consumer Service (ACS) handler did not enforce \n...", "creation_timestamp": "2026-06-30T13:57:44.584842Z"}, {"uuid": "af8e1b86-8008-46a1-b541-1aff577eeb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44946", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116841661870307967", "content": "A severe vulnerability was disclosed for SUSE Rancher (CVE-2026-44946) https://vuldb.com/vuln/374823", "creation_timestamp": "2026-06-30T23:31:12.593281Z"}, {"uuid": "3ca965d8-a540-4387-82a9-a2a2ecbb7b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44945", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msrg73uzvt2n", "content": "CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1", "creation_timestamp": "2026-08-11T01:03:33.374715Z"}, {"uuid": "628d02d5-13b8-4f88-b089-f8e73dcdcca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj354pxh26", "content": "\ud83d\udfe0 CVE-2026-44941 - High (8.4)\n\nA relative path traversal in the \"keyhint\" option in repomd.xml parsing of libzypp before 17.38.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44941/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-02T17:01:27.412215Z"}, {"uuid": "c59bff34-332b-48fa-8d80-57ad8e37a4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqm6sxh22n", "content": "CVE-2026-44941 - libzypp path traversal via \"keyhint\" in repomd.xml\nCVE ID : CVE-2026-44941\n \n Published : July 2, 2026, 3:19 p.m. | 50\u00a0minutes ago\n \n Description : A relative path traversal in the \"keyhint\" option in repomd.xml parsing of libzypp before 17.38.12 can be used b...", "creation_timestamp": "2026-07-02T19:16:15.409910Z"}, {"uuid": "98a7797e-5499-42b0-830b-bba3e309d07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44946", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mppuxyw6pa2t", "content": "\ud83d\udccc CVE-2026-44946 - A SAML authentication replay vulnerability in Rancher's Assertion\n Consumer Service (ACS) handler did not enforce \none-time use of SAML assertion, pot... https://www.cyberhub.blog/cves/CVE-2026-44946", "creation_timestamp": "2026-07-03T06:07:07.008947Z"}, {"uuid": "9b6bc521-635a-46a0-bcbd-e980219ee275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqat3c4ad2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44941 \u0432 libzypp: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 repomd.xml\n\n\n\nhttps://kripta.biz/posts/A4A1D327-2F0A-4106-B7C3-AED913F8597F", "creation_timestamp": "2026-07-03T09:39:06.343729Z"}, {"uuid": "b155e68c-9f21-48b8-ac9c-2508723d8e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqdfuz6572p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44941 \u0432 libzypp: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 repomd.xml\n\n\n\nhttps://kripta.biz/posts/AB260C50-D3B5-4E7D-B5BE-5D6E968416E6", "creation_timestamp": "2026-07-03T10:25:25.802267Z"}, {"uuid": "5c2088b1-eeb6-4fc1-9381-5e66551c63e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprdw2qllp2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44941 \u0432 libzypp: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 repomd.xml\n\n\n\nhttps://kripta.biz/posts/2F077EFE-755A-4F0C-8A1D-C8C5C35B12FC", "creation_timestamp": "2026-07-03T20:07:07.508102Z"}, {"uuid": "b0878834-8912-4985-ba8b-2561bfda5fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44941", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnd3zwv7y2m", "content": "\ud83d\udccc CVE-2026-44941 - A relative path traversal in the \"keyhint\" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious... https://www.cyberhub.blog/cves/CVE-2026-44941", "creation_timestamp": "2026-07-14T23:07:06.719367Z"}, {"uuid": "2577b2d7-fca7-40e7-ad19-1d746dd64346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44944", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrscy4akv22j", "content": "CVE-2026-44944 - iscsiuio control-socket authentication bypass in open-iscsi\nCVE ID : CVE-2026-44944\n \n Published : July 29, 2026, 1:18 p.m. | 25\u00a0minutes ago\n \n Description : An Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the iss...", "creation_timestamp": "2026-07-29T16:13:25.389058Z"}]}