Image SLES15-SP4-SAP-BYOS-EC2 vulnerabilities

1 known vulnerability in Image SLES15-SP4-SAP-BYOS-EC2 from SUSE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Container suse/sle-micro-rancher/5.3:latest: Authentication Bypass by Primary Weakness

  CVE-2026-41054May 20, 2026SUSE

  In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASC