CVE-2026-1530

Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation

State: Published
Severity: 8.1 High
Published: Feb 2, 2026
Updated: Jul 15, 2026
Reserved: Jan 28, 2026

Description

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	redhat
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	redhat-SADP

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Red Hat Satellite 6.16 for RHEL 8Red Hat	0:1.5.1-1.el8sat and laterNot affected
Red Hat Satellite 6.16 for RHEL 9Red Hat	0:1.5.1-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.14.0.14-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.1.23-0.3.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:1.2.0-0.1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:4.2.28-0.1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:2.22.3-1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.27.10-2.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:1.5.1-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.4.3-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:4.16.0.14-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.13.0-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:6.17.7-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.0.3-4.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.14.0.14-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.1.23-0.3.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:1.2.0-0.1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:4.2.28-0.1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:2.22.3-1.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:3.27.10-2.el9pc and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:1.5.1-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.4.3-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:4.16.0.14-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.13.0-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:6.17.7-1.el9sat and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	0:0.0.3-4.el9sat and laterNot affected
Red Hat Satellite 6Red Hat

References

RHSA-2026:5970vendor-advisory
RHSA-2026:5971vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-1530vdb-entry
RHBZ#2433784issue-tracking
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1530.json

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.