What’s Vulnerable › Products

openSUSE Tumbleweed vulnerabilities

9 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your openSUSE Tumbleweed version is affected

Exploited openSUSE Tumbleweed vulnerabilities

• CVE-2015-3306 — ProFTPD Improper Access Control Vulnerability

Latest openSUSE Tumbleweed vulnerabilities

• CVE-2026-104617 — sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline (CVSS 5.1)
• CVE-2025-62875 — Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock (CVSS 5.5)
• CVE-2025-53881 — SUSE-specific logrotate configuration allows escalation from mail user/group to root (CVSS 6.9)
• CVE-2025-46810 — (CVSS 8.5)
• CVE-2024-49506 — Fixed temporary file path in aeon-checks allows fixing of disk encryption key (CVSS 7.3)
• CVE-2023-32183 — (CVSS 7.8)
• CVE-2022-31250 — keylime %post scriplet allows for privilege escalation from keylime user to root (CVSS 7.8)
• CVE-2020-8026 — inn: non-root owned files (CVSS 7.8)
• CVE-2015-3306 — ProFTPD Improper Access Control Vulnerability (CVSS 10.0) — exploited