CVE 2026 88804

www.tenable.com • September 30, 2026

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18.

Published : 2026-09-28

Vector : CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18. Attackers can modify settings that render raw HTML on the login page, potentially leading to session hijacking or unauthorized access. The vulnerability has a CVSS score of 9.6, indicating a critical impact on confidentiality, integrity, and availability. A patch has been released, and administrators are urged to upgrade to the fixed versions immediately. Organizations should also monitor public UI settings for unexpected changes and restrict network access to the Rancher server. The vulnerability was disclosed on September 28, 2026. 1 sources 80

CVE 2026 88804

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)