Known vulnerabilities in rmt-server
Vendor:
SUSE
Software:
rmt-server
Software CPE:
cpe:2.3:o:suse:rmt-server:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.28-150400.3.57.1
2.28-150500.3.50.1
2.28-150700.3.23.1
2.27-150500.3.47.1
2.27-150400.3.54.1
2.27-150700.3.20.1
2.26-150400.3.51.1
2.26-150500.3.44.1
2.26-150700.3.15.1
2.25-150700.3.12.2
2.25-150500.3.41.1
2.25-150400.3.48.1
2.24-150300.3.57.1
2.24-150400.3.45.1
2.24-150700.3.9.3
2.24-150500.3.38.3
2.23-150500.3.34.2
2.22-150500.3.31.1
2.21-150500.3.28.1
2.21-150400.3.37.1
2.21-150300.3.49.1
2.20-150400.3.34.1
2.18-150200.3.48.1
2.18-150400.3.28.1
2.18-150300.3.40.1
2.18-150500.3.19.1
2.17-150300.3.37.1
2.17-150400.3.25.1
2.17-150500.3.16.1
2.17-150200.3.45.1
2.16-150400.3.21.1
2.16-150300.3.33.1
2.16-150200.3.41.1
2.16-150500.3.12.1
2.13-150500.3.3.1
2.13-150100.3.45.1
2.13-150200.3.32.1
2.13-150400.3.12.1
2.13-150300.3.24.1
2.10-150200.3.29.1
2.10-150100.3.42.1
2.10-150000.3.61.1
2.10-150300.3.21.1
2.10-150400.3.9.1
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124838 - Resource exhaustion CVE-2026-34230 |
CWE-400 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124837 - Permissive Regular Expression CVE-2026-34763 |
CWE-625 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124836 - Incorrect Behavior Order: Validate Before Canonicalize CVE-2026-34786 |
CWE-180 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124835 - Improper Handling of Length Parameter Inconsistency CVE-2026-34831 |
CWE-130 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124832 - Resource exhaustion CVE-2026-34826 |
CWE-400 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124828 - Permissive Regular Expression CVE-2026-34830 |
CWE-625 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124827 - Partial String Comparison CVE-2026-34785 |
CWE-187 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124826 - Resource exhaustion CVE-2026-34829 |
CWE-400 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124823 - Interpretation Conflict CVE-2026-26961 |
CWE-436 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-26962 |
CWE-93 | Medium | 2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU111989 - Resource exhaustion CVE-2025-46727 |
CWE-400 | Medium | 2.23-150500.3.34.2 | 27.06.2025 |
SB2025062709 SB2025062710 SB2025062711 and 24 more |
||
| #VU111976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-32441 |
CWE-362 | Low | 2.23-150500.3.34.2 | 26.06.2025 |
SB2025062650 SB2025062720 SB2025062721 and 5 more |
||
| #VU92084 - Protection Mechanism Failure CVE-2024-28103 |
CWE-693 | Low | 2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1 | 13.06.2024 |
SB20240613110 SB20240613114 SB20240613115 and 5 more |
||
| #VU73726 - Improper input validation CVE-2023-27530 |
CWE-20 | Medium | 2.13-150100.3.45.1, 2.13-150200.3.32.1, 2.13-150300.3.24.1, 2.13-150400.3.12.1, 2.13-150500.3.3.1 | 15.03.2023 |
SB2023031545 SB2023031551 SB2023042535 and 18 more |
||
| #VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-28120 |
CWE-79 | Medium | 2.13-150100.3.45.1, 2.13-150200.3.32.1, 2.13-150300.3.24.1, 2.13-150400.3.12.1, 2.13-150500.3.3.1 | 14.03.2023 |
SB2023031410 SB2023041501 SB2023042648 and 13 more |
||
| #VU70668 - Incorrect Default Permissions CVE-2022-31254 |
CWE-276 | Low | 2.10-150000.3.61.1, 2.10-150100.3.42.1, 2.10-150200.3.29.1, 2.10-150300.3.21.1, 2.10-150400.3.9.1, 2.13-150500.3.3.1 | 04.01.2023 |
SB2023010404 SB2023010405 SB2023010406 and 3 more |