CVE Tools
Track your stack

Suse

1,202 CVEs tracked since 1999. Since May 2015, 18 of them reached CISA KEV.

Suse CVEs per month

May 2015 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Suse CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-0530
2015-0631
2015-07104
2015-0831
2015-0910
2015-1042
2015-1160
2015-1231
2016-010
2016-0241
2016-03211
2016-04281
2016-0584
2016-06701
2016-0770
2016-08no snapshot
2016-0990
2016-1020
2016-11no snapshot
2016-1210
2017-01no snapshot
2017-0240
2017-03110
2017-04no snapshot
2017-051 or fewer
2017-06no snapshot
2017-0730
2017-0820
2017-091 or fewer
2017-10110
2017-11no snapshot
2017-1230
2018-0120
2018-021 or fewer
2018-03130
2018-04no snapshot
2018-05no snapshot
2018-0660
2018-0740
2018-0820
2018-092 or fewer
2018-1080
2018-11no snapshot
2018-1230
2019-01no snapshot
2019-021 or fewer
2019-03no snapshot
2019-04no snapshot
2019-0520
2019-06no snapshot
2019-0730
2019-082 or fewer
2019-092 or fewer
2019-102 or fewer
2019-1130
2019-1280
2020-01210
2020-02230
2020-03170
2020-04no snapshot
2020-05no snapshot
2020-0640
2020-07no snapshot
2020-0820
2020-0920
2020-101 or fewer
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-0230
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-0640
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-1230
2022-0131
2022-022 or fewer
2022-033 or fewer
2022-0440
2022-0550
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-0940
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-02110
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-0940
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-10150
2024-11110
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-04100
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-0950
2025-10100
2025-1150
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-05180
2026-06120
2026-0780
2026-088 or fewer
2026-09260
2026-1011 or fewer
2026-1150

Products

The products that kept showing up in Suse's monthly top three, with their CVEs summed over those months.

  1. Linux Enterprise Server9823 months
  2. Linux Enterprise Desktop9218 months
  3. Rancher6813 months
  4. Linux Enterprise619 months
  5. Linux Enterprise Software Development Kit5512 months
  6. Linux Enterprise Workstation Extension371 month
  7. Package Hub315 months
  8. Suse Linux Enterprise Server267 months
  9. Linux Enterprise Debuginfo258 months
  10. Suse Linux Enterprise Desktop193 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Suse.

  1. CVE-2026-116472ingress-nginx mirror-target self-DOS2.7
  2. CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy9.1
  3. CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules7.2
  4. CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgery7.6
  5. CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller9.1
  6. CVE-2026-104623Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster6.3
  7. CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace7.9
  8. CVE-2026-104618sdbootutil: world-readable debug log6.2
  9. CVE-2026-104617sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline5.1
  10. CVE-2023-32198Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks8.0
  11. CVE-2024-22031Rancher users who can create Projects can gain access to arbitrary projects8.5
  12. CVE-2025-23390Fleet doesn’t validate a server’s certificate when connecting through SSH6.3
  13. CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher9.6
  14. CVE-2026-88805Session Not Revoked Server-Side on Logout in Rancher8.1
  15. CVE-2026-88808Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters8.8

The record

Peak rank
#3 in Dec 2004
Busiest month shown
Jun 2016, 70 CVEs
Months with a KEV entry
11 since May 2015
Monthly snapshots
169 since 1999
Suse's full record, month by month