CVE Tools

Suse

1,197 CVEs tracked since 1999. Since Apr 2015, 18 of them reached CISA KEV.

Suse CVEs per month

Apr 2015 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Suse CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-04360
2015-0530
2015-0631
2015-07104
2015-0831
2015-0910
2015-1042
2015-1160
2015-1231
2016-010
2016-0241
2016-03211
2016-04281
2016-0584
2016-06701
2016-0770
2016-08no snapshot
2016-0990
2016-1020
2016-11no snapshot
2016-1210
2017-01no snapshot
2017-0240
2017-03110
2017-04no snapshot
2017-051 or fewer
2017-06no snapshot
2017-0730
2017-0820
2017-091 or fewer
2017-10110
2017-11no snapshot
2017-1230
2018-0120
2018-021 or fewer
2018-03130
2018-04no snapshot
2018-05no snapshot
2018-0660
2018-0740
2018-0820
2018-092 or fewer
2018-1080
2018-11no snapshot
2018-1230
2019-01no snapshot
2019-021 or fewer
2019-03no snapshot
2019-04no snapshot
2019-0520
2019-06no snapshot
2019-0730
2019-082 or fewer
2019-092 or fewer
2019-102 or fewer
2019-1130
2019-1280
2020-01210
2020-02230
2020-03170
2020-04no snapshot
2020-05no snapshot
2020-0640
2020-07no snapshot
2020-0820
2020-0920
2020-101 or fewer
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-0230
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-0640
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-1230
2022-0131
2022-022 or fewer
2022-033 or fewer
2022-0440
2022-0550
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-0940
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-02110
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-0940
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-10150
2024-11110
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-04100
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-0950
2025-10100
2025-1150
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-05180
2026-06120
2026-0780
2026-088 or fewer
2026-09260
2026-106 or fewer

Products

The products that kept showing up in Suse's monthly top three, with their CVEs summed over those months.

  1. Linux Enterprise Server11124 months
  2. Linux Enterprise Desktop9218 months
  3. Rancher6412 months
  4. Linux Enterprise619 months
  5. Linux Enterprise Software Development Kit5512 months
  6. Suse Linux Enterprise Desktop394 months
  7. Linux Enterprise Workstation Extension371 month
  8. Package Hub315 months
  9. Suse Linux Enterprise Server267 months
  10. Linux Enterprise Debuginfo258 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Suse.

  1. CVE-2026-104618sdbootutil: world-readable debug log6.2
  2. CVE-2026-104617sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline5.1
  3. CVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks8.0
  4. CVE-2024-22031Rancher users who can create Projects can gain access to arbitrary projects8.5
  5. CVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH6.3
  6. CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher9.6
  7. CVE-2026-88805Session Not Revoked Server-Side on Logout in Rancher8.1
  8. CVE-2026-88808Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters8.8
  9. CVE-2026-93540Fleet applies namespace labels and annotations without the bundle's service account privileges6.5
  10. CVE-2026-93539Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver5.4
  11. CVE-2026-93538Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet7.1
  12. CVE-2026-93537Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory6.5
  13. CVE-2026-78424OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes8.8
  14. CVE-2026-78427Admission Control Bypass via Hardcoded Sidecar Image Exemption4.3
  15. CVE-2026-78425SAML Audience Confusion Allows Cross-SP Authentication—

The record

Peak rank
#3 in Dec 2004
Busiest month shown
Jun 2016, 70 CVEs
Months with a KEV entry
11 since Apr 2015
Monthly snapshots
168 since 1999
Suse's full record, month by month