8.1
High
CVE-2026-1530 A flaw was found in fog-kubevirt
Description
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Satellite 6 | Versions not published | |
| Red Hat Satellite 6.16 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.16 for RHEL 9 | Versions not published | |
| Red Hat Satellite 6.17 for RHEL 9 | Versions not published |
References
- RHSA-2026:5970 access.redhat.com
- RHSA-2026:5971 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2433784 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Satellite 6
The 195 CVEs of Red Hat Satellite 6 →
CVE-2026-96453
Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
8.0
High
CVE-2026-93998
Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
7.4
High
CVE-2026-120971
A flaw was found in RESTEasy's default exception mapper
5.3
Medium
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium