CVE-2026-88805

HIGH CVSS 8.1 View on NVD ↗

Description

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References

https://github.com/rancher/rancher/security/advisories/GHSA-6vpq-mf48-9794

Published: Sep 28, 2026 16:17 UTC Modified: Sep 29, 2026 04:18 UTC