Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Critical Rancher Flaw Lets Authenticated Users Take Over All Managed Kubernetes Clusters
Excerpt
SUSE has fixed a critical privilege-escalation vulnerability in Rancher that could allow a low-privileged authenticated user to seize administrative control of the Rancher management plane and every downstream Kubernetes cluster it manages. Tracked as CVE-2026-44945 and GitHub advisory GHSA-v584-7w32-jwpq, the issue carries a CVSS v3.1 score of 9.1 and is classified as CWE-441, or an unintended proxy/confused-deputy weakness. The flaw resides in Rancher’s impersonation…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-44945 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…