Harvester (Suse) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-06-16. Vendor: Suse.

CVEs of Harvester

• CVE-2025-71261 - CVSS 8.6 (high), 2026-06-16: An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS…
• CVE-2025-67860 - CVSS 3.8 (low), 2026-02-25: A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments,…
• CVE-2025-62877 - CVSS 9.8 (critical), 2026-01-08: Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password  if they are using the 1.5.x or 1.6.x interactive…