CVE Intelligence

SUSE openSUSE vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SUSE openSUSE: 2 record(s), with affected versions and fixes.

CVE-2026-44933 High · 7.8 CWE-35 May 20, 2026
Path Traversal in Plugin Loading in libzypp
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
CVE-2025-62876 Medium · 5.3 CWE-250 Nov 12, 2025
Execution with Unnecessary Privileges in SUSE openSUSE
A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.