Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-67860 1 Suse 1 Harvester 2026-02-26 3.8 Low
A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.
CVE-2025-62877 1 Suse 1 Harvester 2026-01-12 9.8 Critical
Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password  if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup.