Warning: Critical Cross-site Scripting (XSS) in Rancher - Kubernetes management platform, Patch Immediately!

SUSE Rancher disclosed CVE-2026-88804, a critical stored XSS vulnerability (CVSS 9.6) in multiple Rancher versions that permits unauthenticated attackers to alter public UI settings and execute scripts capable of stealing admin session tokens and gaining unauthorized administrative access; administrators are strongly advised to apply vendor updates and enhance monitoring, noting no public PoC or confirmed exploitation as of 2026-09-29.