https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:32:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265148 EUVD-2026-265148 https://cve.radiocsirt.org/vuln/euvd-2026-265148 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62877 <p>Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password  if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup.</p> <p>Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password  if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration setup.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62877 https://cve.radiocsirt.org/vuln/ghsa-6g8q-hp2j-gvwv <p><strong>Affected:</strong> Go: github.com/harvester/harvester-installer</p> <p>### Impact</p> <p>Projects using the SUSE Virtualization (Harvester) environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the [PXE boot mechanism](https://docs.harvesterhci.io/v1.7/install/pxe-boot-install/) is utilized along with the [Harvester configuration](https://docs.harvesterhci. io/v1.7/install/harvester-configuration) setup.</p> <p>A critical vulnerability has been identified within the SUSE Virtualization interactive installer. This vulnerability allows an attacker to gain unauthorized network access to the host via a remote shell (SSH).</p> <p>The SUSE Virtualization operating system includes a default administrative login credential intended solely for out-of-band cluster management tasks (for example, perform troubleshooting, device management and system recovery over serial ports). When the interactive installer is used to create or expand a cluster, the installer enables the host&#39;s networking functions before the default password is reset. This presents a window of opportunity for an attacker to exploit the default password to gain unauthorized access to the host via SSH.</p> <p>Please consult the associated [MITRE ATT&amp;CK - Technique - Default Credentials](https://attack.mitre.org/techniques/T0812/) for further information about this category of attack.</p> <p>### Patches</p> <p>This vulnerability is addressed by updating the interactive i…</p> <p><strong>Affected:</strong> Go: github.com/harvester/harvester-installer</p> <p>### Impact</p> <p>Projects using the SUSE Virtualization (Harvester) environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the [PXE boot mechanism](https://docs.harvesterhci.io/v1.7/install/pxe-boot-install/) is utilized along with the [Harvester configuration](https://docs.harvesterhci. io/v1.7/install/harvester-configuration) setup.</p> <p>A critical vulnerability has been identified within the SUSE Virtualization interactive installer. This vulnerability allows an attacker to gain unauthorized network access to the host via a remote shell (SSH).</p> <p>The SUSE Virtualization operating system includes a default administrative login credential intended solely for out-of-band cluster management tasks (for example, perform troubleshooting, device management and system recovery over serial ports). When the interactive installer is used to create or expand a cluster, the installer enables the host&#39;s networking functions before the default password is reset. This presents a window of opportunity for an attacker to exploit the default password to gain unauthorized access to the host via SSH.</p> <p>Please consult the associated [MITRE ATT&amp;CK - Technique - Default Credentials](https://attack.mitre.org/techniques/T0812/) for further information about this category of attack.</p> <p>### Patches</p> <p>This vulnerability is addressed by updating the interactive i…</p> https://cve.radiocsirt.org/vuln/ghsa-6g8q-hp2j-gvwv