Miggo Predictive Vulnerability Database
Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.
Concerned about an active attack path? Talk to our security experts and see Miggo in action
Contact Us
Top 10 CVEs
New vulnerabilities last 30 days
CVE-2024-22031: Rancher users who can create Projects can gain access to arbitrary projects
Rancher privilege escalation via project creation grants unauthorized access to arbitrary projects through a cross-cluster namespace naming collision.
Analysis:
Available
8.5
high
10/15/2026
CVE-2023-32198: Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
Steve's improper TLS certificate validation subjects users to MitM attacks, where attackers can take over the Rancher UI for XSS and credential theft.
Analysis:
Available
8
high
10/15/2026
CVE-2026-62847: Metalama allows local code execution through DLL planting in shared temporary directories
Metalama local privilege escalation via DLL planting in insecure temporary directories executes arbitrary code by loading untrusted assemblies during builds.
Analysis:
Available
6
medium
10/14/2026
CVE-2026-55787: Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
flyto-core SSRF guard bypass via IPv6 transition addresses in validate_url_ssrf exfiltrates internal data and cloud metadata credentials via http modules.
Analysis:
Available
7.1
high
10/14/2026