CVE-2026-44939Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-95

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-06-04); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-04: 1Mentions · 2026-06-19: 1Mentions · 2026-07-01: 1Mentions · 2026-07-24: 1Technical Details · 2026-07-01: 106-0406-1907-0107-24
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-041
General1
2026-06-191
Disclosure1
2026-07-011
Disclosure1
2026-07-241
Disclosure1
Full discourse4 posts
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-44939: Rancher Manager Command Injection Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04qGyTq0

    Post summary

    The post introduces the Rancher Manager command injection bug (CVE‑2026‑44939) and hints at business impact and response guidance, but offers no concrete exploit details, patches, or evidence of ongoing attacks.

    0000034
    32 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 Rancher Manager, Command Injection, #CVE-2026-44939 (Critical) -DC-Jul2026-812 https://dailycve.com/rancher-manager-command-injection-cve-2026-44939-critical-dc-jul2026-812/

    Post summary

    The tweet is a brief headline announcing a critical Command Injection vulnerability (CVE‑2026‑44939) in Rancher Manager, with a link to more information.

    0000040
    217 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting SUSE Rancher (CVE-2026-44939) https://vuldb.com/vuln/372349

    Post summary

    The post notes that the severity level for CVE‑2026‑44939, a vulnerability in SUSE Rancher, has been raised according to the link provided.

    0000056
    2.2K followersView on X
  • セキュリティ対策Lab@securityLab_jp
    General

    Rancher Kubernetesプラットフォームに3件の重大な脆弱性(CVE-2026-44939,CVE-2026-41052,CVE-2026-41053) https://rocket-boys.co.jp/security-measures-lab/rancher-platform-flaws-cve-2026-44939-cve-2026-41052/ #セキュリティ対策Lab #security #securitynews

    Post summary

    A Twitter post announces three critical Rancher Kubernetes platform CVEs and links to a security lab article, but provides no further technical, exploit, or remediation details.

    0000071
    409 followersView on X

Explore more