PULSEUnderground Intel

EN VIVO20señales / 24h

FEED

ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomqilin reclama a Innoe Asesores · MX · Professional Servicesransomaurora reclama a CP Manufacturing, Inc. · US · Manufacturingransompear reclama a Five Star Jewelers · US · Retail & E-Commerceransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomqilin reclama a Innoe Asesores · MX · Professional Servicesransomaurora reclama a CP Manufacturing, Inc. · US · Manufacturingransompear reclama a Five Star Jewelers · US · Retail & E-Commerce

← Todos los CVEs

CVE Watch30 oct 2026

CVE-2026-104615

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.

CVSS

7.9

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 30 oct 2026 · Última mod.: 30 oct 2026 · CWE-290

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being bound to the registration token that the request was made with. As a result, a registration request could be associated with a managed cluster that was originally registered with a different registration token.

Referencias oficiales

github.comhttps://github.com/rancher/fleet/security/advisories/GHSA-gx8v-2929-9q95

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1046236.3 MED

———A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that was introduced to protect this feature was not applied to every API route that can reach it, so an alternative request form reached the shell handler without the access check being evaluated. This could allow any authenticated users to run a pod on the management cluster.4h CVE-2026-1197034.8 MED

———xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allows remote unauthenticated attackers to skip Bearer HMAC token verification by spoofing the Device-ID header. Attackers supplying an allowlisted MAC-address-shaped device identifier can open an authenticated WebSocket session, issue voice-assistant commands, exchange audio, and read that device's conversation context.6h CVE-2026-919147.1 ALT

———Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.5h CVE-2026-1194255.4 MED

———OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming feature that lets unauthenticated attackers hijack authorized client sessions by spoofing unauthenticated MAC-to-IP observations. Attackers on the same Layer-2 segment can send forged gratuitous ARP replies binding their IP to a victim's MAC, gaining portal access with traffic attributed to the victim.6h CVE-2026-1159624.3 MED

——0Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCred: from n/a through 4.0.1.1d CVE-2026-1186535.3 MED

——11Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is unset, and the default RateLimiter uses that result as its client identifier. A remote attacker can rotate arbitrary forwarded-address values to obtain new rate-limit buckets and bypass IP-based throttling used for controls such as brute-force or request-volume protection. This issue is fixed in Echo v5.1.0.1d