CVE-2026-1531

Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification

8.1 HighFix available

A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

0.29%Up 0.3 points since Feb 2, 2026

What each source reports

CVE List Score used 8.1

Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification

Record: CVE-2026-1531
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-295, CWE-295
Updated: 2026-11-02

EUVDEUVD-2026-5117 8.1

Record: EUVD-2026-5117
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-2qxw-7fmx-gqfm 8.1

foreman_kubevirt disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set

Record: GHSA-2qxw-7fmx-gqfm
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-295
Updated: 2026-11-02

NVD 8.1

Record: CVE-2026-1531
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSVGHSA-2qxw-7fmx-gqfm 8.1

foreman_kubevirt disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set

Record: GHSA-2qxw-7fmx-gqfm
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSVRHSA-2026:5968 8.3

Red Hat Security Advisory: Satellite 6.18.4 Async Update

Record: RHSA-2026:5968
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:5970 8.5

Red Hat Security Advisory: Satellite 6.17.7 Async Update

Record: RHSA-2026:5970
CVSS 3.1: 8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5971 8.5

Red Hat Security Advisory: Satellite 6.16.7 Async Update

Record: RHSA-2026:5971
CVSS 3.1: 8.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`foreman_kubevirt` RubyGems	before 0.4.3	0.4.3
`foreman_kubevirt` RubyGems	before 0.4.3, plus listed versions 0.1.00.1.10.1.20.1.30.1.4 Show 9 moreShow less 0.1.50.1.70.1.80.1.90.2.00.3.00.4.00.4.10.4.2	0.4.3
`yggdrasil-worker-forwarder` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:0.4.3-1.el9sat	0:0.4.3-1.el9sat
`foreman` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman` Red Hat:satellite_utils:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat

Show 166 moreShow less

Affected packages
Package	Affected	Fixed
`foreman-cli` Red Hat:satellite_utils:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-cli` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-debug` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-ec2` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-journald` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-openstack` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-pcp` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-redis` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-service` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`foreman-vmware` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:3.16.0.12-1.el9sat	0:3.16.0.12-1.el9sat
`rubygem-katello` Red Hat:satellite:6.18::el9 From an advisory covering 7 CVEs	before 0:4.18.0.9-1.el9sat	0:4.18.0.9-1.el9sat
`foreman` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python-brotli` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-pulp-container` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python-pulp-rpm` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`python3-libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-brotli` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-django` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-libcomps` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-pulp-container` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python3.11-pulp-rpm` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`satellite` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-capsule` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-common` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-obsolete-packages` Red Hat:satellite_capsule:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`libcomps` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite_maintenance:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`foreman` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-cli` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`satellite` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-cli` Red Hat:satellite_utils:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`foreman` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-cli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-debug` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-ec2` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-journald` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-openstack` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-ovirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-redis` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-service` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`foreman-vmware` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.14.0.14-1.el9sat	0:3.14.0.14-1.el9sat
`libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`libcomps-debugsource` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python-brotli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-pulp-container` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python-pulp-rpm` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`python3-libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3-libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-brotli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-django` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-libcomps` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-libcomps-debuginfo` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.1.23-0.3.el9pc	0:0.1.23-0.3.el9pc
`python3.11-pulp-container` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:2.22.3-1.el9pc	0:2.22.3-1.el9pc
`python3.11-pulp-rpm` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:3.27.10-2.el9pc	0:3.27.10-2.el9pc
`rubygem-fog-kubevirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:1.5.1-1.el9sat	0:1.5.1-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.4.3-1.el9sat	0:0.4.3-1.el9sat
`rubygem-katello` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:4.16.0.14-1.el9sat	0:4.16.0.14-1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.13.0-1.el9sat	0:0.13.0-1.el9sat
`satellite` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-cli` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-common` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`satellite-obsolete-packages` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:6.17.7-1.el9sat	0:6.17.7-1.el9sat
`yggdrasil-worker-forwarder` Red Hat:satellite:6.17::el9 From an advisory covering 12 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`python-brotli` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli-debugsource` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el8pc	0:1.2.0-0.1.el8pc
`python-brotli` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-brotli-debugsource` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python3.11-brotli-debuginfo` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.2.0-0.1.el9pc	0:1.2.0-0.1.el9pc
`python-django` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python3.11-django` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python-django` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python3.11-django` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el8pc	0:4.2.28-0.1.el8pc
`python-django` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-django` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python-django` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`python3.11-django` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:4.2.28-0.1.el9pc	0:4.2.28-0.1.el9pc
`yggdrasil-worker-forwarder` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.0.3-4.el8sat	0:0.0.3-4.el8sat
`yggdrasil-worker-forwarder` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.0.3-4.el9sat	0:0.0.3-4.el9sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el8sat	0:0.13.0-0.1.el8sat
`rubygem-rubyipmi` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el8sat	0:0.13.0-0.1.el8sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el9sat	0:0.13.0-0.1.el9sat
`rubygem-rubyipmi` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.13.0-0.1.el9sat	0:0.13.0-0.1.el9sat
`rubygem-fog-kubevirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:1.5.1-1.el8sat	0:1.5.1-1.el8sat
`rubygem-fog-kubevirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:1.5.1-1.el9sat	0:1.5.1-1.el9sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:0.2.0-2.el8sat	0:0.2.0-2.el8sat
`rubygem-foreman_kubevirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:0.2.0-2.el9sat	0:0.2.0-2.el9sat
`foreman` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-debug` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-pcp` Red Hat:satellite_capsule:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite_utils:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-cli` Red Hat:satellite_utils:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-cli` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-debug` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-ec2` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-journald` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-libvirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-openstack` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-ovirt` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-pcp` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-postgresql` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-redis` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-service` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-telemetry` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman-vmware` Red Hat:satellite:6.16::el8 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el8sat	0:3.12.0.14-1.el8sat
`foreman` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-debug` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite_capsule:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman` Red Hat:satellite_utils:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-cli` Red Hat:satellite_utils:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-cli` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-debug` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-dynflow-sidekiq` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-ec2` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-journald` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-libvirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-openstack` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-ovirt` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-pcp` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-postgresql` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-redis` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-service` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-telemetry` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat
`foreman-vmware` Red Hat:satellite:6.16::el9 From an advisory covering 11 CVEs	before 0:3.12.0.14-1.el9sat	0:3.12.0.14-1.el9sat

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-1531 is a high vulnerability (CVSS 8.1) in Red Hat Satellite 6, published February 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in foreman_kubevirt 0.4.3.

References

Show 101 moreShow less