Cyber Resilience

CVE-2026-44935

Critical

Published: 02 July 2026

Published
02 July 2026
Modified
03 July 2026
KEV Added
—
Patch
—
CVSS Score v3.1 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0057 43.1th percentile
Risk Priority 70 floored blend · peak EPSS

Summary

CVE-2026-44935 is a critical-severity Improper Validation of Specified Type of Input (CWE-1287) vulnerability. Its CVSS base score is 9.9 (Critical).

Operationally, ranked at the 43.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants.

CWE(s)
CWE-1287

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References