VULNERABILITY INTELLIGENCE

CVE-2026-1530

CVSS score8.1 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-02-02
Last modified2026-07-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Weakness classification

  • secalert@redhat.com: CWE-295
  • 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-295

Primary references