Suse Fleet vulnerabilities
2 known vulnerabilities affecting suse/fleet.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2025-23390P3MEDIUMCVSS 6.3≥ 0.9.0-rc.1, < 0.10.12≥ 0.11.0, < 0.11.7+1 more2026-10-15
CVE-2025-23390 [MEDIUM] CWE-295 CVE-2025-23390: A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a tru
nvd
CVE-2026-75036P4MEDIUMCVSS 4.3≥ 0.12.0, < 0.12.19≥ 0.13.0, < 0.13.15+3 more2026-09-03
CVE-2026-75036 [MEDIUM] CWE-918 CVE-2026-75036: A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evalu
A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a `GitRepo` resource can cause the Fleet controller to:
- Disclose cluster metadata available
nvd