MajorCritical vulnerability
CVE-2026-88805 (CVSS 8.1)
NVD · officialPublished Sep 28, 2026Risk 37/100
Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.
Technical details
CVSS
8.1
AV:NetworkAC:LowPR:NoneUI:RequiredC:HighI:HighA:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source