{"id":"EUVD-2026-41863","enisaUuid":"eb3e2c82-1140-3a53-a05c-1fcfb55a06f3","description":"Missing filtering when the helmRepoURLRegex field isn\u0027t set on a GitRepo resource in SUSE Rancher Fleet\u0027s bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth) to any URL specified in the helm.repo field of a fleet.yaml file, allowing attackers able to push to fleet monitored git repos to leak helm access credentials.","datePublished":"Jul 6, 2026, 9:30:20 AM","dateUpdated":"Jul 6, 2026, 12:47:45 PM","baseScore":5.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","references":"https://github.com/advisories/GHSA-hx4v-cxpf-vh8m\n","aliases":"CVE-2026-44936\nGHSA-hx4v-cxpf-vh8m\n","assigner":"suse","epss":0.35,"enisaIdProduct":[{"id":"652f4053-b068-31b6-85bb-557f1e0ff9ee","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.13.0 \u003c0.13.11"},{"id":"8d40fca1-67ca-3a9d-a037-3365a0170657","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.14.0 \u003c0.14.6"},{"id":"c6f88a6f-3eb5-317a-9950-72f7cbbb1685","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.12.0 \u003c0.12.15"},{"id":"d5aa3373-e73f-3358-b79b-c9fc64ddc3d1","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.15.0 \u003c0.15.2"}],"enisaIdVendor":[{"id":"431ac954-244d-316f-996b-1a44da0c3da1","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"9e499806-8be9-3672-9474-e017d1610cf4","vulnerability":{"id":"CVE-2026-44936","description":"Missing filtering when the helmRepoURLRegex field isn\u0027t set on a GitRepo resource in SUSE Rancher Fleet\u0027s bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 forwards Helm authentication credentials (BasicAuth) to any URL specified in the helm.repo field of a fleet.yaml file, allowing attackers able to push to fleet monitored git repos to leak helm access credentials.","datePublished":"Jul 6, 2026, 9:30:20 AM","dateUpdated":"Jul 6, 2026, 12:47:45 PM","status":"PUBLISHED","baseScore":5.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","references":"https://github.com/advisories/GHSA-hx4v-cxpf-vh8m\n","enisa_id":"EUVD-2026-41863\n","assigner":"suse","epss":0.35,"dataProcessed":"Nov 7, 2026, 7:21:46 AM","vulnerabilityProduct":[{"id":"55d9ed7a-66e0-326f-8aaa-72b5905397d3","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.14.0 \u003c0.14.6"},{"id":"8dc1885f-09cd-395d-8314-04b9472a3284","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.13.0 \u003c0.13.11"},{"id":"991ca937-fbaf-36c0-aa41-42ff44789805","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.15.0 \u003c0.15.2"},{"id":"da7da377-79c3-35df-8356-c449e6e5b4d7","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"0.12.0 \u003c0.12.15"}],"vulnerabilityVendor":[{"id":"00791747-e369-34f4-b512-e19c49e8159a","vendor":{"name":"SUSE"}}]}},{"id":"ba6872ae-6214-35dc-8362-8abb00ac3888","vulnerability":{"id":"GHSA-hx4v-cxpf-vh8m","description":"Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml","datePublished":"Jul 1, 2026, 8:45:05 PM","dateUpdated":"Jul 1, 2026, 8:45:05 PM","baseScore":0.0,"references":"https://github.com/rancher/fleet/security/advisories/GHSA-hx4v-cxpf-vh8m\nhttps://github.com/rancher/fleet\n","enisa_id":"EUVD-2026-41863\n","aliases":"CVE-2026-44936\nGHSA-hx4v-cxpf-vh8m\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}