https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:35:34.565569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-11046 cnvd-2017-11046 2026-10-08T15:35:34.645869+00:00 cnvd-2017-11046 https://cve.radiocsirt.org/vuln/euvd-2026-72444 EUVD-2026-72444 2026-10-08T15:35:34.645909+00:00 EUVD-2026-72444 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2639 fkie_cve-2017-2639 2026-10-08T15:35:34.645925+00:00

It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.

 https://cve.radiocsirt.org/vuln/ghsa-gmm6-vqjm-5p45 GHSA-gmm6-vqjm-5p45 2026-10-08T15:35:34.645956+00:00

It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.

 https://cve.radiocsirt.org/vuln/gsd-2017-2639 gsd-2017-2639 2026-10-08T15:35:34.645973+00:00 gsd-2017-2639 https://cve.radiocsirt.org/vuln/rhsa-2017:1367 RHSA-2017:1367 — Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update 2026-10-08T15:35:34.645984+00:00

CFME: default certificate used across all installs CloudForms: cloudforms fails to properly check certificates when communicating with RHEV and OpenShift and custom CA