VULNERABILITY INTELLIGENCE
CVE-2025-71261
CVSS score8.6 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-06-16
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Description
An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control.
Weakness classification
- meissner@suse.de: CWE-295