Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ SUSE-SU-2026:22050-1 — elemental-register (CVE-2026-33186)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Security update for elemental-register

This update for elemental-register fixes the following issue

  • CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo-

header (bsc#1260277).

Changes:

  • Update to v1.9.2:
  • 71d1fb9c Local node labels (#984)
  • ce6acda9 Bump golang.org/x/net to v0.55.0 includes fixes for:
  • bsc#1266789 bsc#1265921 bsc#1267197 bsc#1267168 bsc#1251679
  • 060958b7 Bump golangci/golangci-lint-action
  • 3b4b6699 use a real UUID for the machine registration ID
  • d33faa01 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
  • 6dceb411 Deterministic endpoints for MachineRegistrations (#975)
  • Update to v1.9.1:
  • b42116d4 Ensure the machine inventory selector keeps looking for a match
  • Update to v1.9.0:
  • Update to v1.9.0-rc1:
  • 9952ebe1 Update libraries based on dependency scan
  • 5e128c5d Adapt OBS packages to a 1.9 version to coexist with 1.8 version
  • f88219af Fix cluster api version in test environment
  • ad937279 Run 'make generate' to recreate generated code and vendor folder
  • 15bb505f Bump to cluster API libraries to v1.12.x
  • 63369022 Bump test environment tools in Makefile
  • 7b464802 Run 'make vendor' to recreate vendor folder
  • 879b3464 Bump yip
  • aeda10ac Fix unit tests after bumping libraries
  • 33dcb61a Run 'make vendor' to recreate vendor folder
  • 0ccd96af Bump wrangler from v2 to v3
  • ff0190c4 Run 'make generate' to renew all generated code and config files
  • b28d2f08 Bump controller generator to version 0.19
  • 0bf7dc32 Update controller runtime options
  • 549e720d Run 'make vendor' to recreate vendor folder
  • 3f0f27e0 Updated cluster-api, steve, rancher/apis, client-go and k8s/api

to the level they were at rancher v2.13

  • 49ebf0b7 Update headers to 2026
  • fd13ba92 Update questions to include SL Micro 6.2

Affected software

SUSE-SU-2026:22050-1 is recorded against 1 package.

  • elemental-register (fixed in 1.9.2-160000.1.1)

Timeline and source

Published on 8 June 2026 and last revised on 10 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

www.suse.com (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
www.suse.com (Web)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2026-06-08
Updated 2026-08-20
Modified 2026-06-10
Fix URL N/A

Affected Packages

Software From version Fixed in
elemental-register 1.9.2-160000.1.1

Free Vulnerability Check

Is your site affected by SUSE-SU-2026:22050-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2026:22050-1 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.