high8.2
CVE-2026-44937
Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 an…
Impact
Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade attack on other repositories on the system.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/rancher/fleet | >= 0.15.0, < 0.15.2 | 0.15.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suse | Rancher Fleet | from 0.12.0 before 0.12.15 from 0.13.0 before 0.13.11 from 0.14.0 before 0.14.6 from 0.15.0 before 0.15.2 |