What is the suse CNA?

suse is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 197 CVE records since 2019.

How many CVEs has suse published?

suse has published 197 CVE records, including 76 in the last two years.

What is suse's CVE data quality grade?

RadicalNotion.AI grades suse's CVE data quality as A, with an overall completeness score of 98.6%. This reflects how consistently its CVE records include vendor (98%), product (98%), CVSS (99.5%), and CWE (99%) information.

What products does suse publish CVEs for?

suse most frequently publishes CVEs for Rancher, github.com/rancher/rancher, leap, linux enterprise server, Factory.

Which vendors does suse cover?

suse publishes CVEs across 11 distinct vendors, most often SUSE, openSUSE, Rancher, neuvector, Microsoft.

Is suse actively publishing CVEs?

suse is currently active, based on 76 CVEs in the last two years.

What is the average severity of suse's CVEs?

The average CVSS base score across suse's scored CVEs is 6.9.

How many critical CVEs has suse published?

suse has published 41 critical-severity CVEs and 134 high-severity CVEs.

What are the most common weakness types in suse's CVEs?

suse's CVEs most often map to these CWE weakness types: CWE-276 (Incorrect Default Permissions), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).

How does suse rank among CNAs?

By total CVE volume, suse ranks #85 of 370 CNAs, and it reports more complete CVE records than 51% of all CNAs.

RadicalNotion.AI

Log in Start free

Grade A

Active

suse

Name: suse CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published January 14, 2026

197

CVEs published

Total assigned

6.7

Years active

2019–2026

6.9

Avg CVSS

Across scored CVEs

76

Recent CVEs

Last 2 years

Overview

suse is a CVE Numbering Authority that has published 197 CVE records since 2019. It is currently classified as active, with 76 CVEs published in the last two years. Its CVE data quality is graded A (98.6% overall completeness).

Among the 370 CNAs tracked here, suse ranks #85 by CVE volume and reports more complete records than 51% of all CNAs.

Data quality report card

How complete and consistent suse's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often suse also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

A

98.6%

Overall score

Overall completeness98.6%

Vendor completeness98%

Product completeness98%

CVSS completeness99.5%

CWE completeness99%

99%

Update rate

Records revised after publishing

11

Vendor diversity

Distinct vendors covered

403 chars

Avg description length

Per CVE record

2019-05-13

First CVE date

Earliest assignment

2026-01-14

Latest CVE date

Most recent assignment

6.9

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of suse's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical41

High134

Medium82

Low7

In CISA’s Known Exploited Vulnerabilities catalog

0

None of suse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories suse most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs suse has published each year.

2019

5

2020

39

2021

23

2022

28

2023

26

2024

24

2025

43

2026

76

Top vendors

The vendors suse publishes the most CVEs for.

SUSE190 CVEs
openSUSE83 CVEs
Rancher73 CVEs
neuvector10 CVEs
Microsoft9 CVEs
presire5 CVEs
X.Org5 CVEs
CalcProgrammer13 CVEs

Top products

The products suse publishes the most CVEs for.

Rancher71 CVEs
github.com/rancher/rancher48 CVEs
leap37 CVEs
linux enterprise server32 CVEs
Factory28 CVEs
openSUSE Tumbleweed15 CVEs
openSUSE Leap 15.113 CVEs
SUSE Linux Enterprise Server 1212 CVEs

Latest CVEs

The most recent CVEs assigned by suse.

CVE-2026-25706CWE-78
yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)
High · CVSS 7.5
EPSS 0.4%2026-09-01
CVE-2026-59681CWE-78
yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join
High · CVSS 8.7
EPSS 1.1%2026-09-01
CVE-2026-59680CWE-78
yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute
High · CVSS 8.6
EPSS 2.3%2026-09-01
CVE-2026-78422CWE-686
zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID
High · CVSS 7.3
EPSS 0.1%2026-08-31
CVE-2026-71402CWE-125
wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length
Medium · CVSS 5.3
EPSS 0.2%2026-08-27
CVE-2026-71401CWE-191
wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read
Medium · CVSS 5.3
EPSS 0.2%2026-08-27
CVE-2026-18794CWE-1288
OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
High · CVSS 8.8
EPSS 0.5%2026-08-26
CVE-2026-59683CWE-73
OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings
Critical · CVSS 9.3
EPSS 0.6%2026-08-26
CVE-2026-59682CWE-73
Arbitrary file overwrite and deletion local and remote in OpenRGB
High · CVSS 8.8
EPSS 0.5%2026-08-26
CVE-2026-75038CWE-61
Predictable temporary file in /tmp allows symlink attack in LACT
Medium · CVSS 6.9
EPSS 0.1%2026-08-25
CVE-2026-75037CWE-290
Polkit authentication bypass in LACT
High · CVSS 7.3
EPSS 0.1%2026-08-25
CVE-2026-44945CWE-441
Cross-Cluster Impersonation Confused-Deputy Privilege Escalation
Critical · CVSS 9.1
EPSS 0.4%2026-08-05

Track new suse CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor suse CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the suse CNA.

What is the suse CNA?: suse is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 197 CVE records since 2019.
How many CVEs has suse published?: suse has published 197 CVE records, including 76 in the last two years.
What is suse's CVE data quality grade?: RadicalNotion.AI grades suse's CVE data quality as A, with an overall completeness score of 98.6%. This reflects how consistently its CVE records include vendor (98%), product (98%), CVSS (99.5%), and CWE (99%) information.
What products does suse publish CVEs for?: suse most frequently publishes CVEs for Rancher, github.com/rancher/rancher, leap, linux enterprise server, Factory.
Which vendors does suse cover?: suse publishes CVEs across 11 distinct vendors, most often SUSE, openSUSE, Rancher, neuvector, Microsoft.
Is suse actively publishing CVEs?: suse is currently active, based on 76 CVEs in the last two years.
What is the average severity of suse's CVEs?: The average CVSS base score across suse's scored CVEs is 6.9.
How many critical CVEs has suse published?: suse has published 41 critical-severity CVEs and 134 high-severity CVEs.
Are any of suse's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of suse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in suse's CVEs?: suse's CVEs most often map to these CWE weakness types: CWE-276 (Incorrect Default Permissions), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management).
How does suse rank among CNAs?: By total CVE volume, suse ranks #85 of 370 CNAs, and it reports more complete CVE records than 51% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track suse CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing