critical9.6
CVE-2026-88804
An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Ra…
Impact
An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18.
Affected products
| Product | Affected versions |
|---|---|
| SUSE Rancher 2.15 | before 2.15.2 |
| 2.14 | before 2.14.6 |
| 2.13 | before 2.13.10 |
| 2.12 | before 2.12.14 |
| 2.11 | before 2.11.18. |
Versions were read from the advisory text. No structured product data has been published for this record yet.