Threat intelligence dashboard
CVE-2026-88805high

Session Not Revoked Server-Side on Logout in Rancher

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

Risk score

8.1

CVSS 3.1

Vendor
SUSE
Product
Rancher
CWE
CWE-613
Published
Sep 28, 2026
Updated
Sep 28, 2026
CISA KEV
Not flagged

Affected products and versions

Rancher

SUSE

Version / rangeStatusType
2.15.0 to before 2.15.2affectedsemver

Technical metrics

8.1

CVSS 3.1

Severity
high
Source
suse
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N