{"id":"EUVD-2025-210170","enisaUuid":"53dd3e12-f06e-37f9-8dcb-cdf896d149fb","description":"An attacker with network-level access between the SUSE Virtualization \nand Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it \nto bypass TLS as a security control.","datePublished":"Jun 16, 2026, 3:42:32 PM","dateUpdated":"Jun 16, 2026, 5:52:30 PM","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","references":"https://github.com/harvester/harvester/security/advisories/GHSA-pgh9-mpwc-8jjf\n","aliases":"CVE-2025-71261\nGHSA-pgh9-mpwc-8jjf\n","assigner":"suse","epss":0.21,"enisaIdProduct":[{"id":"9236075d-53fb-3ba0-a1ef-4e89aab3c277","product":{"name":"harvester","vendor":{"name":"SUSE"}},"product_version":"0 \u003c1.8"}],"enisaIdVendor":[{"id":"bfc74cb4-aebf-3040-84f8-53d86a773f9a","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"72f437c0-c4d0-3237-a19b-4969bb71698b","vulnerability":{"id":"CVE-2025-71261","description":"An attacker with network-level access between the SUSE Virtualization \nand Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it \nto bypass TLS as a security control.","datePublished":"Jun 16, 2026, 3:42:32 PM","dateUpdated":"Jun 16, 2026, 5:52:30 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","references":"https://github.com/harvester/harvester/security/advisories/GHSA-pgh9-mpwc-8jjf\n","enisa_id":"EUVD-2025-210170\n","assigner":"suse","epss":0.21,"dataProcessed":"Oct 29, 2026, 7:19:05 AM","vulnerabilityProduct":[{"id":"163fd836-2ae1-33cd-8927-d1e7a4ff397f","product":{"name":"harvester","vendor":{"name":"SUSE"}},"product_version":"0 \u003c1.8"}],"vulnerabilityVendor":[{"id":"c135fa6d-1451-3c6b-9066-64df3fda800d","vendor":{"name":"SUSE"}}]}},{"id":"a4ab81fb-2e1a-35fc-8582-2e0f1f3f3eaf","vulnerability":{"id":"GHSA-pgh9-mpwc-8jjf","description":"Harvester\u0027s SUSE Virtualization Registration Client Vulnerable to MITM and DOS","datePublished":"May 6, 2026, 8:16:08 PM","dateUpdated":"Jul 8, 2026, 5:36:53 PM","baseScore":0.0,"references":"https://github.com/harvester/harvester/security/advisories/GHSA-pgh9-mpwc-8jjf\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71261\nhttps://github.com/harvester/harvester\n","enisa_id":"EUVD-2025-210170\n","aliases":"GHSA-pgh9-mpwc-8jjf\nCVE-2025-71261\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}