CVE-2026-1531

A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.

• CWE-295
• CWE-295

• https://access.redhat.com/errata/RHSA-2026:5968
• https://access.redhat.com/errata/RHSA-2026:5970
• https://access.redhat.com/errata/RHSA-2026:5971
• https://access.redhat.com/security/cve/CVE-2026-1531
• https://bugzilla.redhat.com/show_bug.cgi?id=2433786
• https://access.redhat.com/errata/RHSA-2026:5968
• https://access.redhat.com/errata/RHSA-2026:5970
• https://access.redhat.com/errata/RHSA-2026:5971
• https://access.redhat.com/security/cve/CVE-2026-1531
• https://bugzilla.redhat.com/show_bug.cgi?id=2433786
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1531.json

Published

Feb 2, 2026

Last Modified

Jul 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15302The ARMember plugin for WordPress is vulnerable to Directory…5.3
• CVE-2026-15304The Plugin Organizer plugin for WordPress is vulnerable to S…6.5
• CVE-2026-15305Users were able to upload files with arbitrary MIME types to…6.3
• CVE-2026-15306The Product Feed Manager For WooCommerce – Sell on 200+ Onli…6.1
• CVE-2026-15307An issue was discovered in Django 5.2 before 5.2.17 and 6.0 …8.8
• CVE-2026-15308The incremental HTML parser (html.parser.HTMLParser) allows …7.5
• CVE-2026-15311A vulnerability was identified in NousResearch hermes-agent …3.5
• CVE-2026-15314Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary …7.5
• CVE-2026-15317A security flaw has been discovered in Sipeed PicoClaw up to…6.3
• CVE-2026-15318A weakness has been identified in Sipeed PicoClaw up to 0.2.…6.3
• CVE-2026-15319A security vulnerability has been detected in Sipeed PicoCla…7.3
• CVE-2026-1532A vulnerability was identified in D-Link DCS-700L 1.03.09. T…5.5