CVE-2026-88805CWE-613

CVE-2026-88805

High · published September 28, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2026-09-28T20:17Z
References (1)
https://github.com/rancher/rancher/security/advisories/GHSA-6vpq-mf48-9794 · [email protected]
EPSS history
Timeline
  • 30 SEP 03:29Z
    EPSS moved — → 0%
    epss
  • 28 SEP 15:50Z
    Session Not Revoked Server-Side on Logout in Rancher
    cvelistv5