Information Disclosure Vulnerability in SUSE Product
CVE-2026-104617

5.9MEDIUM

Key Information:

Vendor

Suse
Status
Suse Linux Enterprise Server 16.1
Suse Linux Enterprise Server For Nvidia 16.1
Opensuse Leap 16.1
Tumbleweed
Vendor
CVE Published:
15 October 2026

What is CVE-2026-104617?

A vulnerability has been identified within SUSE products related to QR code generation, where private data, including sensitive PINs and keys, can be accessed through the /proc filesystem. This data leak allows low-privileged users on the system to exploit the 'qrencode' invocations used for displaying QR codes, potentially compromising sensitive information.

Affected Version(s)

openSUSE Leap 16.1 ?

SUSE Linux Enterprise Server 16.1 ?

SUSE Linux Enterprise Server for NVIDIA 16.1 ?

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617
https://www.suse.com/security/cve/CVE-2026-104617.html

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthias Gerstner of SUSE
.