Known vulnerabilities in rmt-server

Vendor: SUSE
Software: rmt-server
Software CPE: cpe:2.3:o:suse:rmt-server:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rmt-server rmt-server is affected by 16 known vulnerabilities: 13 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124838 - Resource exhaustion
CVE-2026-34230
CWE-400 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124837 - Permissive Regular Expression
CVE-2026-34763
CWE-625 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124836 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-34786
CWE-180 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124835 - Improper Handling of Length Parameter Inconsistency
CVE-2026-34831
CWE-130 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124832 - Resource exhaustion
CVE-2026-34826
CWE-400 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124828 - Permissive Regular Expression
CVE-2026-34830
CWE-625 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124827 - Partial String Comparison
CVE-2026-34785
CWE-187 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124826 - Resource exhaustion
CVE-2026-34829
CWE-400 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124823 - Interpretation Conflict
CVE-2026-26961
CWE-436 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-26962
CWE-93 Medium
No
No
2.27-150400.3.54.1, 2.27-150500.3.47.1, 2.27-150700.3.20.1 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 2 more
#VU111989 - Resource exhaustion
CVE-2025-46727
CWE-400 Medium
No
No
2.23-150500.3.34.2 27.06.2025 SB2025062709
SB2025062710
SB2025062711
and 24 more
#VU111976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32441
CWE-362 Low
No
No
2.23-150500.3.34.2 26.06.2025 SB2025062650
SB2025062720
SB2025062721
and 5 more
#VU92084 - Protection Mechanism Failure
CVE-2024-28103
CWE-693 Low
No
No
2.17-150200.3.45.1, 2.17-150300.3.37.1, 2.17-150400.3.25.1, 2.17-150500.3.16.1 13.06.2024 SB20240613110
SB20240613114
SB20240613115
and 5 more
#VU73726 - Improper input validation
CVE-2023-27530
CWE-20 Medium
No
No
2.13-150100.3.45.1, 2.13-150200.3.32.1, 2.13-150300.3.24.1, 2.13-150400.3.12.1, 2.13-150500.3.3.1 15.03.2023 SB2023031545
SB2023031551
SB2023042535
and 18 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120
CWE-79 Medium
No
No
2.13-150100.3.45.1, 2.13-150200.3.32.1, 2.13-150300.3.24.1, 2.13-150400.3.12.1, 2.13-150500.3.3.1 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU70668 - Incorrect Default Permissions
CVE-2022-31254
CWE-276 Low
No
No
2.10-150000.3.61.1, 2.10-150100.3.42.1, 2.10-150200.3.29.1, 2.10-150300.3.21.1, 2.10-150400.3.9.1, 2.13-150500.3.3.1 04.01.2023 SB2023010404
SB2023010405
SB2023010406
and 3 more