CVE detail
CVE-2026-1530
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1530.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comFeb 2, 2026, 6:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2433784bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 2, 2026, 6:16 AM - https://access.redhat.com/security/cve/CVE-2026-1530access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 2, 2026, 6:16 AM - https://access.redhat.com/errata/RHSA-2026:5971access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 2, 2026, 6:16 AM - https://access.redhat.com/errata/RHSA-2026:5970access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 2, 2026, 6:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-54342CVSS 8.1 · High
In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend (ePA Aktensystem, Konnektor, IDP, TSS) can present a self-signed TLS certi…
- CVE-2026-48021CVSS 9.1 · Critical
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controll…
- CVE-2026-52688CVSS 7.5 · High
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
- CVE-2026-56820CVSS 7.4 · High
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, `OcspClient` doe…
- CVE-2026-56624CVSS 7.3 · High
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate…
- CVE-2026-46428CVSS 9.1 · Critical
lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug in lettre's `boring-tls` integration silently disables TLS…