CVE-2026-1530
Fixed in a distro release EPSS <1%CVSS 8.1
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.
Products: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | fog-kubevirt | 1.5.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.16 | foreman | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-cli | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-cli | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-debug | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-debug | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-dynflow-sidekiq | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-dynflow-sidekiq | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-ec2 | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-ec2 | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-journald | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-journald | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-libvirt | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-libvirt | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-openstack | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-openstack | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-ovirt | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-ovirt | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-pcp | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-pcp | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-postgresql | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-postgresql | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-redis | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-redis | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-service | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-service | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-telemetry | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-telemetry | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | foreman-vmware | 0:3.12.0.14-1.el9sat |
| Red Hat satellite 6.16 | foreman-vmware | 0:3.12.0.14-1.el8sat |
| Red Hat satellite 6.16 | python-brotli | 0:1.2.0-0.1.el8pc |
| Red Hat satellite 6.16 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.16 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.16 | python-brotli-debugsource | 0:1.2.0-0.1.el8pc |
| Red Hat satellite 6.16 | python-django | 0:4.2.28-0.1.el8pc |
| Red Hat satellite 6.16 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.16 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.16 | python3.11-brotli | 0:1.2.0-0.1.el8pc |
| Red Hat satellite 6.16 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el8pc |
| Red Hat satellite 6.16 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.28-0.1.el8pc |
| Red Hat satellite 6.16 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.16 | rubygem-fog-kubevirt | 0:1.5.1-1.el9sat |
| Red Hat satellite 6.16 | rubygem-fog-kubevirt | 0:1.5.1-1.el8sat |
| Red Hat satellite 6.16 | rubygem-foreman_kubevirt | 0:0.2.0-2.el9sat |
| Red Hat satellite 6.16 | rubygem-foreman_kubevirt | 0:0.2.0-2.el8sat |
| Red Hat satellite 6.16 | rubygem-rubyipmi | 0:0.13.0-0.1.el9sat |
| Red Hat satellite 6.16 | rubygem-rubyipmi | 0:0.13.0-0.1.el8sat |
| Red Hat satellite 6.16 | yggdrasil-worker-forwarder | 0:0.0.3-4.el9sat |
| Red Hat satellite 6.16 | yggdrasil-worker-forwarder | 0:0.0.3-4.el8sat |
| Red Hat satellite 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-cli | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-debug | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-dynflow-sidekiq | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-ec2 | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-journald | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-libvirt | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-openstack | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-ovirt | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-pcp | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-postgresql | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-redis | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-service | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-telemetry | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | foreman-vmware | 0:3.14.0.14-1.el9sat |
| Red Hat satellite 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.17 | python-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite 6.17 | python-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite 6.17 | python3.11-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite 6.17 | python3.11-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite 6.17 | python3.11-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite 6.17 | rubygem-fog-kubevirt | 0:1.5.1-1.el9sat |
| Red Hat satellite 6.17 | rubygem-foreman_kubevirt | 0:0.4.3-1.el9sat |
| Red Hat satellite 6.17 | rubygem-katello | 0:4.16.0.14-1.el9sat |
| Red Hat satellite 6.17 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-cli | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-common | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | satellite-obsolete-packages | 0:6.17.7-1.el9sat |
| Red Hat satellite 6.17 | yggdrasil-worker-forwarder | 0:0.0.3-4.el9sat |
| Red Hat satellite capsule 6.16 | foreman | 0:3.12.0.14-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman | 0:3.12.0.14-1.el8sat |
| Red Hat satellite capsule 6.16 | foreman-debug | 0:3.12.0.14-1.el9sat |
| Red Hat satellite capsule 6.16 | foreman-debug | 0:3.12.0.14-1.el8sat |
| Red Hat satellite capsule 6.16 | foreman-pcp | 0:3.12.0.14-1.el8sat |
| Red Hat satellite capsule 6.16 | foreman-pcp | 0:3.12.0.14-1.el9sat |
| Red Hat satellite capsule 6.16 | python-brotli | 0:1.2.0-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python-brotli-debugsource | 0:1.2.0-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python-django | 0:4.2.28-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-brotli | 0:1.2.0-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el8pc |
| Red Hat satellite capsule 6.16 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.16 | python3.11-django | 0:4.2.28-0.1.el8pc |
| Red Hat satellite capsule 6.16 | rubygem-rubyipmi | 0:0.13.0-0.1.el9sat |
| Red Hat satellite capsule 6.16 | rubygem-rubyipmi | 0:0.13.0-0.1.el8sat |
| Red Hat satellite capsule 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | foreman-debug | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | foreman-pcp | 0:3.14.0.14-1.el9sat |
| Red Hat satellite capsule 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-brotli-debugsource | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite capsule 6.17 | python-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite capsule 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-brotli | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-brotli-debuginfo | 0:1.2.0-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-django | 0:4.2.28-0.1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-pulp-container | 0:2.22.3-1.el9pc |
| Red Hat satellite capsule 6.17 | python3.11-pulp-rpm | 0:3.27.10-2.el9pc |
| Red Hat satellite capsule 6.17 | rubygem-rubyipmi | 0:0.13.0-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-capsule | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-common | 0:6.17.7-1.el9sat |
| Red Hat satellite capsule 6.17 | satellite-obsolete-packages | 0:6.17.7-1.el9sat |
| Red Hat satellite maintenance 6.17 | libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | libcomps-debugsource | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3-libcomps | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite maintenance 6.17 | python3.11-libcomps-debuginfo | 0:0.1.23-0.3.el9pc |
| Red Hat satellite utils 6.16 | foreman | 0:3.12.0.14-1.el9sat |
| Red Hat satellite utils 6.16 | foreman | 0:3.12.0.14-1.el8sat |
| Red Hat satellite utils 6.16 | foreman-cli | 0:3.12.0.14-1.el9sat |
| Red Hat satellite utils 6.16 | foreman-cli | 0:3.12.0.14-1.el8sat |
| Red Hat satellite utils 6.17 | foreman | 0:3.14.0.14-1.el9sat |
| Red Hat satellite utils 6.17 | foreman-cli | 0:3.14.0.14-1.el9sat |
| Red Hat satellite utils 6.17 | satellite | 0:6.17.7-1.el9sat |
| Red Hat satellite utils 6.17 | satellite-cli | 0:6.17.7-1.el9sat |