CVE-2026-1530
Published: 02 February 2026
Summary
CVE-2026-1530 is a high-severity Improper Certificate Validation (CWE-295) vulnerability in Redhat (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Adversary-in-the-Middle (T1557); ranked at the 16.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-17 (Public Key Infrastructure Certificates) and SC-8 (Transmission Confidentiality and Integrity).
Deeper analysis
CVE-2026-1530 is a vulnerability in the fog-kubevirt component, where certificate validation is disabled, allowing remote attackers to conduct Man-in-the-Middle (MITM) attacks. This flaw affects sensitive communications between Red Hat Satellite and OpenShift environments, as documented with CWE-295 (Improper Certificate Validation). The issue carries a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), indicating high severity due to network accessibility, low complexity, and significant impacts on confidentiality and integrity.
A remote attacker possessing low privileges can exploit this vulnerability to intercept and potentially modify communications between Satellite and OpenShift. Successful exploitation results in information disclosure, such as exposing sensitive data in transit, and data integrity compromises, where altered communications could lead to unauthorized actions or misinformation.
Red Hat has released security errata RHSA-2026:5970 and RHSA-2026:5971 to address this vulnerability, with further details available on the Red Hat security advisory for CVE-2026-1530 and Bugzilla entry 2433784. Practitioners should apply these updates promptly to restore certificate validation and mitigate MITM risks.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-5118
Vulnerability details
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in…
more
information disclosure and data integrity compromise.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Disabled certificate validation (CWE-295) directly enables successful Adversary-in-the-Middle interception and tampering of network traffic between Satellite and OpenShift.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Mandates the use of public key infrastructure certificates with validation to assure the validity of communications, directly countering the disabled certificate validation enabling MITM attacks.
Requires cryptographic mechanisms to protect transmission confidentiality and integrity, preventing unauthorized interception and modification of sensitive Satellite-OpenShift communications via MITM.
Ensures timely identification, reporting, and correction of flaws like the fog-kubevirt certificate validation issue through patching as provided in Red Hat errata.