← CVE Intelligence

CVE-2026-1530

Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation PUBLISHED

Description (CNA)

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Satellite 6.16 for RHEL 8unaffected 0:1.5.1-1.el8sat before *
Red Hat / Red Hat Satellite 6.16 for RHEL 9unaffected 0:1.5.1-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.14.0.14-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.1.23-0.3.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:1.2.0-0.1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:4.2.28-0.1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:2.22.3-1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.27.10-2.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:1.5.1-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.4.3-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:4.16.0.14-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.13.0-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:6.17.7-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.0.3-4.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.14.0.14-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.1.23-0.3.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:1.2.0-0.1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:4.2.28-0.1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:2.22.3-1.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:3.27.10-2.el9pc before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:1.5.1-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.4.3-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:4.16.0.14-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.13.0-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:6.17.7-1.el9sat before *
Red Hat / Red Hat Satellite 6.17 for RHEL 9unaffected 0:0.0.3-4.el9sat before *
Red Hat / Red Hat Satellite 6affected

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.