CVE-2026-75034

Last refreshed2026-11-04

Status: UPDATED | Advisory ID: CVE-2026-75034

Key Details

CVE	CVE-2026-75034
CVSS Score / Version	7.4 (High) / CVSS v3.1
Updated	2026-11-03
CVSS Vector	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N`
CVSS Prose	attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products	suse Rancher
Classified as	CWE-294 (Authentication Bypass by Capture-replay)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
suse	Rancher

Vendor

Product

Affected Versions

Patch Status

suse

Rancher

Subsystems	General OT
Sectors	Multiple

What to Know

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sessions as the victim.

This issue affects Rancher: before 2.15.1. (NVD)

What to Do

Monitor suse's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-75034
CVE	https://www.cve.org/CVERecord?id=CVE-2026-75034

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-75034

CVE

https://www.cve.org/CVERecord?id=CVE-2026-75034