Opensuse Munge vulnerabilities

2 CVEs affecting Opensuse Munge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25506, published 2026-02-10.

More from Opensuse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3691, published 2020-01-23. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to…
• CVE-2026-25506, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication…