Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)

Linuxsecurity

Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)

First seen 9 Jun 2026, 20:20 UTC • •74.0

Article Content

1 / 77

Browse articles

ThreatCluster •June 10, 2026 at 20:17 UTC

•CVE-2026-33186 affects multiple SUSE Elemental systems, posing a serious security risk.
•The vulnerability allows unauthorized access due to improper HTTP/2 header validation.
•Patches have been released, and immediate application is recommended to prevent exploitation.

A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized access. The vulnerability was published on March 20, 2026, and a proof of concept was released on April 7, 2026. Affected systems include SUSE Linux Micro 6.2 and openSUSE Leap 16.0. Updates have been released to address this issue, with critical CVSS scores indicating a high level of risk. Security professionals are urged to apply the patches immediately to mitigate potential exploitation. The updates were made available on June 8, 2026, with multiple advisories confirming the vulnerability's impact across various components.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 122d ago How this analysis works

Timeline

2026-03-20

CVE-2026-33186 published

SUSE disclosed a critical authorization bypass vulnerability affecting multiple Elemental systems.

2026-04-07

First public PoC released

A proof of concept for CVE-2026-33186 was made publicly available, increasing the risk of exploitation.

2026-06-08

Patches released for affected systems

SUSE released updates for elemental-system-agent, elemental-toolkit, and elemental-register to fix CVE-2026-33186.

2026-06-10

Security advisories published

Multiple advisories detailing the vulnerability and patches were published, urging immediate action from users.

More articles in this cluster (76)

Following this threat?

Track SuSE and CVE-2025-47911 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…