What is the suse CNA?

suse is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 197 CVE records since 2019.

How many CVEs has suse published?

suse has published 197 CVE records, including 76 in the last two years.

What is suse's CVE data quality grade?

RadicalNotion.AI grades suse's CVE data quality as A, with an overall completeness score of 98.6%. This reflects how consistently its CVE records include vendor (98%), product (98%), CVSS (99.5%), and CWE (99%) information.

What products does suse publish CVEs for?

suse most frequently publishes CVEs for Rancher, github.com/rancher/rancher, leap, linux enterprise server, Factory.

Which vendors does suse cover?

suse publishes CVEs across 11 distinct vendors, most often SUSE, openSUSE, Rancher, neuvector, presire.

Is suse actively publishing CVEs?

suse is currently active, based on 76 CVEs in the last two years.

What is the average severity of suse's CVEs?

The average CVSS base score across suse's scored CVEs is 6.9.

How many critical CVEs has suse published?

suse has published 38 critical-severity CVEs and 122 high-severity CVEs.

What are the most common weakness types in suse's CVEs?

suse's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-276 (Incorrect Default Permissions), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).

How does suse rank among CNAs?

By total CVE volume, suse ranks #85 of 370 CNAs, and it reports more complete CVE records than 51% of all CNAs.

Grade A

Active

suse

Name: suse CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published January 14, 2026

197

CVEs published

Total assigned

6.7

Years active

2019–2026

6.9

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

suse is a CVE Numbering Authority that has published 197 CVE records since 2019. It is currently classified as active, with 76 CVEs published in the last two years. Its CVE data quality is graded A (98.6% overall completeness).

Among the 370 CNAs tracked here, suse ranks #85 by CVE volume and reports more complete records than 51% of all CNAs.

Data quality report card

How complete and consistent suse's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often suse also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

98.6%

Overall score

Overall completeness98.6%

Vendor completeness98%

Product completeness98%

CVSS completeness99.5%

CWE completeness99%

99%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

403 chars

Avg description length

Per CVE record

2019-05-13

First CVE date

Earliest assignment

2026-01-14

Latest CVE date

Most recent assignment

6.9

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of suse's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical38

High122

Medium74

Low7

In CISA’s Known Exploited Vulnerabilities catalog

None of suse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories suse most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs suse has published each year.

2019

2020

2021

2022

2023

2024

2025

2026

Top vendors

The vendors suse publishes the most CVEs for.

SUSE180 CVEs
openSUSE81 CVEs
Rancher67 CVEs
neuvector9 CVEs
presire5 CVEs
X.Org5 CVEs
uyuni-project3 CVEs
Linux Foundation3 CVEs

Latest CVEs

The most recent CVEs assigned by suse.

CVE-2025-8412CWE-120
VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
Low · CVSS 2.0
EPSS 0.1%2026-07-14
CVE-2026-59674CWE-61
LPE from suricata user to root due to chown in %post in suricata packaging
High · CVSS 7.1
EPSS 0.1%2026-07-14
CVE-2026-56003CWE-122
libXfont2 computeProps Property Buffer Heap Buffer Overflow
High · CVSS 8.8
EPSS 0.6%2026-07-08
CVE-2026-56002CWE-122
libXfont2 PCF Font Parsing Heap Buffer Overflow
High · CVSS 8.8
EPSS 0.6%2026-07-08
CVE-2026-56001CWE-122
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
High · CVSS 8.8
EPSS 0.4%2026-07-08
CVE-2026-55999CWE-122
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
High · CVSS 8.5
EPSS 0.2%2026-07-08
CVE-2026-56000CWE-416
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
Critical · CVSS 9.0
EPSS 0.2%2026-07-08
CVE-2026-44938CWE-522
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
High · CVSS 8.8
EPSS 0.5%2026-07-07
CVE-2026-44937CWE-918
SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
High · CVSS 8.3
EPSS 0.5%2026-07-06
CVE-2026-44936CWE-918
Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
Medium · CVSS 5.0
EPSS 0.4%2026-07-06
CVE-2026-44934CWE-215
Exposed tokens in SUSE Rancher AI Agent logs
High · CVSS 7.0
EPSS 0.1%2026-07-06
CVE-2026-44935CWE-1287
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
Critical · CVSS 9.9
EPSS 0.6%2026-07-02

Track new suse CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor suse CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the suse CNA.

What is the suse CNA?: suse is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 197 CVE records since 2019.
How many CVEs has suse published?: suse has published 197 CVE records, including 76 in the last two years.
What is suse's CVE data quality grade?: RadicalNotion.AI grades suse's CVE data quality as A, with an overall completeness score of 98.6%. This reflects how consistently its CVE records include vendor (98%), product (98%), CVSS (99.5%), and CWE (99%) information.
What products does suse publish CVEs for?: suse most frequently publishes CVEs for Rancher, github.com/rancher/rancher, leap, linux enterprise server, Factory.
Which vendors does suse cover?: suse publishes CVEs across 11 distinct vendors, most often SUSE, openSUSE, Rancher, neuvector, presire.
Is suse actively publishing CVEs?: suse is currently active, based on 76 CVEs in the last two years.
What is the average severity of suse's CVEs?: The average CVSS base score across suse's scored CVEs is 6.9.
How many critical CVEs has suse published?: suse has published 38 critical-severity CVEs and 122 high-severity CVEs.
Are any of suse's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of suse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in suse's CVEs?: suse's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-276 (Incorrect Default Permissions), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).
How does suse rank among CNAs?: By total CVE volume, suse ranks #85 of 370 CNAs, and it reports more complete CVE records than 51% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track suse CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing