Filtered by vendor Kubev2v Subscriptions
Filtered by product Assisted-migration-agent Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-53475 1 Kubev2v 1 Assisted-migration-agent 2026-06-11 9.3 Critical
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
CVE-2026-53476 1 Kubev2v 1 Assisted-migration-agent 2026-06-11 9.6 Critical
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.