CVE-2026-53475 — Assisted-migration-agent: tls verification disabled on all vcenter connections
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability a…
Published: 2026-06-10 · CVSS: 9.3 · CVSS 3.1
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle (MITM) attacker to intercept and harvest vCenter administrator credentials. This can lead to unauthorized access to vCenter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7