Kubev2V vulnerabilities

3 vulnerabilities

Known vulnerabilities in Kubev2V products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
9.3CVE-2026-53475github.com/kubev2vassisted-migration-agent+1
EPSS score
0.50%
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.7.3CVE-2026-53473kubev2vmigration_planner_ui
EPSS score
0.34%
A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user clicks this link in the user interface, the embedded malicious code executes within the user's browser session. This cross-site scripting (XSS) vulnerability allows the attacker to compromise the victim's Red Hat Single Sign-On (SSO) session, potentially leading to unauthorized cross-tenant data access and API actions.9.6CVE-2026-53476github.com/kubev2vassisted-migration-agent+1
EPSS score
0.43%
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.