CVE-2025-71261High· 8.6▾ TwilightAn attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
github.com/harvester/harvester < 1.8.0Patched in:
github.com/harvester/harvester 1.8.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111943Medium· 6.8Distrust compromised intermediate certificates in crypto/x509
CVE-2025-14022High· 7.7LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK
CVE-2021-20327Medium· 6.4A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate
CVE-2025-66491Medium· 5.9Traefik is an HTTP reverse proxy and load balancer
CVE-2025-62375Mediumgo-witness and witness are Go modules for generating attestations
CVE-2025-66001High· 8.8NeuVector supports login authentication through OpenID Connect