fog-kubevirt allows remote attacker to perform MITM attack due to disabled certificate validation

🗓️ 02 Feb 2026 06:30:53Reported by GitHub Advisory DatabaseType

Fog-kubevirt vulnerability disables certificate validation, enabling man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 22
ATTACKERKB	CVE-2026-1530	2 Feb 202605:47	–	attackerkb
Circl	CVE-2026-1530	2 Feb 202606:21	–	circl
CNNVD	Fog::Kubevirt Trust Management Vulnerability	28 Jan 202600:00	–	cnnvd
CVE	CVE-2026-1530	2 Feb 202605:47	–	cve
Cvelist	CVE-2026-1530 Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation	2 Feb 202605:47	–	cvelist
EUVD	EUVD-2026-5118	2 Feb 202605:47	–	euvd
NVD	CVE-2026-1530	2 Feb 202606:16	–	nvd
OSV	GHSA-M3HQ-3QJ8-C5FM fog-kubevirt allows remote attacker to perform MITM attack due to disabled certificate validation	2 Feb 202606:30	–	osv
OSV	RHSA-2026:5970 Red Hat Security Advisory: Satellite 6.17.7 Async Update	27 Mar 202610:14	–	osv
OSV	RHSA-2026:5971 Red Hat Security Advisory: Satellite 6.16.7 Async Update	27 Mar 202610:14	–	osv

Vulners

Node

fog-kubevirtRange<1.5.1rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-1530
access	www.access.redhat.com/security/cve/CVE-2026-1530
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/fog/fog-kubevirt/pull/168
github	www.github.com/fog/fog-kubevirt/commit/8371e9ded99f9ec3e74caf2f283836109763e450
github	www.github.com/fog/fog-kubevirt/commit/9603d79a239a0f68bedfc679cd1b65fbf6ec4753
github	www.github.com/fog/fog-kubevirt/blob/8adb03e07972d6e19a7713ecf2a827aa2cfe4b9e/CHANGELOG.md
github	www.github.com/fog/fog-kubevirt/releases/tag/v1.5.1
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/fog-kubevirt/CVE-2026-1530.yml
access	www.access.redhat.com/errata/RHSA-2026:5970

26 Mar 2026 21:31Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.18.1

EPSS0.00012

SSVC