{}

{}

{}

{"acknowledgement": "This issue was discovered by Evgeni Golov (Red Hat).", "bugzilla": {"description": "fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation", "id": "2433784", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433784"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-295", "details": ["No description is available for this CVE."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2026-1530", "package_state": [{"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "rubygem-fog-kubevirt", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "satellite:el8/rubygem-fog-kubevirt", "product_name": "Red Hat Satellite 6"}], "public_date": "2026-01-28T12:40:37Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-1530\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-1530"], "statement": "This is an IMPORTANT flaw in fog-kubevirt, a component used by Red Hat Satellite for managing OpenShift Virtualization/KubeVirt. The vulnerability allows a Man-in-the-Middle (MITM) attack due to disabled certificate validation. An attacker capable of intercepting traffic between Satellite and OpenShift could exploit this to compromise sensitive communications.", "threat_severity": "Important"}

{}