CVE-2026-1531
1 advisory.
RubyGems/foreman_kubevirt CVE-2026-1531: high 8.1
foreman_kubevirt disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set
Action: Upgrade foreman_kubevirt to 0.4.3 or later.
bundle update foreman_kubevirtAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.3 | - |
Fixed versions
| 0.4.3 |
Sources
- osv: GHSA-2qxw-7fmx-gqfm
- https://nvd.nist.gov/vuln/detail/CVE-2026-1531
- https://github.com/theforeman/foreman_kubevirt/commit/6c9973ee59c6fbec65f165eb9ea9dd4ebb6eeef1
- https://access.redhat.com/errata/RHSA-2026:5968
- https://access.redhat.com/errata/RHSA-2026:5970
- https://access.redhat.com/errata/RHSA-2026:5971
- https://access.redhat.com/security/cve/CVE-2026-1531
- https://bugzilla.redhat.com/show_bug.cgi?id=2433786
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/foreman_kubevirt/CVE-2026-1531.yml
- https://github.com/theforeman/foreman_kubevirt
CVE-2026-1531 · published · modified · JSON