{"id":"CVE-2026-1530","state":"PUBLISHED","title":"Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation","description":"A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.","publishedAt":"2026-02-02T05:47:10.049Z","updatedAt":"2026-07-15T01:21:29.368Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat Satellite 6.16 for RHEL 8","Red Hat Red Hat Satellite 6.16 for RHEL 9","Red Hat Red Hat Satellite 6.17 for RHEL 9","Red Hat Red Hat Satellite 6"],"affected":[{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el8sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"foreman","defaultStatus":"affected","versions":[{"version":"0:3.14.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"libcomps","defaultStatus":"affected","versions":[{"version":"0:0.1.23-0.3.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-brotli","defaultStatus":"affected","versions":[{"version":"0:1.2.0-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-django","defaultStatus":"affected","versions":[{"version":"0:4.2.28-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-container","defaultStatus":"affected","versions":[{"version":"0:2.22.3-1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-rpm","defaultStatus":"affected","versions":[{"version":"0:3.27.10-2.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-foreman_kubevirt","defaultStatus":"affected","versions":[{"version":"0:0.4.3-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-katello","defaultStatus":"affected","versions":[{"version":"0:4.16.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-rubyipmi","defaultStatus":"affected","versions":[{"version":"0:0.13.0-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"satellite","defaultStatus":"affected","versions":[{"version":"0:6.17.7-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"yggdrasil-worker-forwarder","defaultStatus":"affected","versions":[{"version":"0:0.0.3-4.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"foreman","defaultStatus":"affected","versions":[{"version":"0:3.14.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"libcomps","defaultStatus":"affected","versions":[{"version":"0:0.1.23-0.3.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-brotli","defaultStatus":"affected","versions":[{"version":"0:1.2.0-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-django","defaultStatus":"affected","versions":[{"version":"0:4.2.28-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-container","defaultStatus":"affected","versions":[{"version":"0:2.22.3-1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-rpm","defaultStatus":"affected","versions":[{"version":"0:3.27.10-2.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-foreman_kubevirt","defaultStatus":"affected","versions":[{"version":"0:0.4.3-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-katello","defaultStatus":"affected","versions":[{"version":"0:4.16.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-rubyipmi","defaultStatus":"affected","versions":[{"version":"0:0.13.0-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"satellite","defaultStatus":"affected","versions":[{"version":"0:6.17.7-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"yggdrasil-worker-forwarder","defaultStatus":"affected","versions":[{"version":"0:0.0.3-4.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"satellite:el8/rubygem-fog-kubevirt","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"]}],"references":["https://access.redhat.com/errata/RHSA-2026:5970","https://access.redhat.com/errata/RHSA-2026:5971","https://access.redhat.com/security/cve/CVE-2026-1530","https://bugzilla.redhat.com/show_bug.cgi?id=2433784","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1530.json"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/1xxx/CVE-2026-1530.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-1530","state":"PUBLISHED","datePublished":"2026-02-02T05:47:10.049Z","dateUpdated":"2026-07-15T01:21:29.368Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2026-01-28T12:41:52.835Z"},"containers":{"cna":{"title":"Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation","descriptions":[{"lang":"en","value":"A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el8sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_maintenance:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"foreman","defaultStatus":"affected","versions":[{"version":"0:3.14.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"libcomps","defaultStatus":"affected","versions":[{"version":"0:0.1.23-0.3.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-brotli","defaultStatus":"affected","versions":[{"version":"0:1.2.0-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-django","defaultStatus":"affected","versions":[{"version":"0:4.2.28-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-container","defaultStatus":"affected","versions":[{"version":"0:2.22.3-1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-rpm","defaultStatus":"affected","versions":[{"version":"0:3.27.10-2.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-foreman_kubevirt","defaultStatus":"affected","versions":[{"version":"0:0.4.3-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-katello","defaultStatus":"affected","versions":[{"version":"0:4.16.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-rubyipmi","defaultStatus":"affected","versions":[{"version":"0:0.13.0-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"satellite","defaultStatus":"affected","versions":[{"version":"0:6.17.7-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"yggdrasil-worker-forwarder","defaultStatus":"affected","versions":[{"version":"0:0.0.3-4.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"foreman","defaultStatus":"affected","versions":[{"version":"0:3.14.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"libcomps","defaultStatus":"affected","versions":[{"version":"0:0.1.23-0.3.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-brotli","defaultStatus":"affected","versions":[{"version":"0:1.2.0-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-django","defaultStatus":"affected","versions":[{"version":"0:4.2.28-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-container","defaultStatus":"affected","versions":[{"version":"0:2.22.3-1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-rpm","defaultStatus":"affected","versions":[{"version":"0:3.27.10-2.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-foreman_kubevirt","defaultStatus":"affected","versions":[{"version":"0:0.4.3-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-katello","defaultStatus":"affected","versions":[{"version":"0:4.16.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-rubyipmi","defaultStatus":"affected","versions":[{"version":"0:0.13.0-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"satellite","defaultStatus":"affected","versions":[{"version":"0:6.17.7-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"yggdrasil-worker-forwarder","defaultStatus":"affected","versions":[{"version":"0:0.0.3-4.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_utils:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"satellite:el8/rubygem-fog-kubevirt","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:5970","name":"RHSA-2026:5970","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5971","name":"RHSA-2026:5971","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1530","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433784","name":"RHBZ#2433784","tags":["issue-tracking","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-03-26T20:31:44.599Z"},"datePublic":"2026-01-28T12:40:37.424Z","x_redhatCweChain":"CWE-295: Improper Certificate Validation","workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"timeline":[{"lang":"en","time":"2026-01-28T12:39:43.076Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-01-28T12:40:37.424Z","value":"Made public."}],"credits":[{"lang":"en","value":"This issue was discovered by Evgeni Golov (Red Hat)."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-02T16:26:13.539148Z","id":"CVE-2026-1530","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-02T16:28:31.327Z"}},{"title":"fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation","descriptions":[{"lang":"en","value":"A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el8sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"foreman","defaultStatus":"affected","versions":[{"version":"0:3.14.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"libcomps","defaultStatus":"affected","versions":[{"version":"0:0.1.23-0.3.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-brotli","defaultStatus":"affected","versions":[{"version":"0:1.2.0-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-django","defaultStatus":"affected","versions":[{"version":"0:4.2.28-0.1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-container","defaultStatus":"affected","versions":[{"version":"0:2.22.3-1.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"python-pulp-rpm","defaultStatus":"affected","versions":[{"version":"0:3.27.10-2.el9pc","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-fog-kubevirt","defaultStatus":"affected","versions":[{"version":"0:1.5.1-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-foreman_kubevirt","defaultStatus":"affected","versions":[{"version":"0:0.4.3-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-katello","defaultStatus":"affected","versions":[{"version":"0:4.16.0.14-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"rubygem-rubyipmi","defaultStatus":"affected","versions":[{"version":"0:0.13.0-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"satellite","defaultStatus":"affected","versions":[{"version":"0:6.17.7-1.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","packageName":"yggdrasil-worker-forwarder","defaultStatus":"affected","versions":[{"version":"0:0.0.3-4.el9sat","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"satellite:el8/rubygem-fog-kubevirt","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-1530","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433784","name":"RHBZ#2433784","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1530.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5971","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5970","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-07-15T01:21:29.368Z"},"datePublic":"2026-01-28T12:40:37.424Z","solutions":[{"lang":"en","value":"RHSA-2026:5971: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"},{"lang":"en","value":"RHSA-2026:5970: Red Hat Satellite 6.17 for RHEL 9"}],"timeline":[{"lang":"en","time":"2026-01-28T12:39:43.076Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-01-28T12:40:37.424Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}