CVE-2026-1530

Published: Feb 2, 2026Modified: Jul 15, 2026Deferred

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (9)

https://access.redhat.com/errata/RHSA-2026:5970

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:5971

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-1530

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2433784

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:5970

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://access.redhat.com/errata/RHSA-2026:5971

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://access.redhat.com/security/cve/CVE-2026-1530

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://bugzilla.redhat.com/show_bug.cgi?id=2433784

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1530.json

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Timeline

No history available yet.