CVE-2025-71261

Last refreshed2026-10-12

Status: UPDATED | Advisory ID: CVE-2025-71261

Key Details

CVE	CVE-2025-71261
CVSS Score / Version	8.6 (High) / CVSS v3.1
Updated	2026-10-07
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products	suse Harvester
Classified as	CWE-295 (Improper Certificate Validation)

Vendor	Product	Affected Versions	Patch Status
suse	Harvester

Vendor

Product

Affected Versions

Patch Status

suse

Harvester

Subsystems	General OT
Sectors	Multiple

An attacker with network-level access between the SUSE Virtualization

and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it

to bypass TLS as a security control.

Monitor suse's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-71261
CVE	https://www.cve.org/CVERecord?id=CVE-2025-71261

Source

Reference

NVD

CVE