CVE-2026-44939EPSS p69.7%

CVE-2026-44939CVE-2026-44939

Description

A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.

Scoring

EPSS1.31% probability of exploitation · percentile 69.7% · 2026-10-05T12:00:23Z
Last modified2026-06-24
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.