CVE-2026-53475

Name of the Vulnerable Software and Affected Versions assisted-migration-agent (affected versions not specified)

Description The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This design flaw allows a Man-in-the-Middle (MITM) attacker to intercept and decrypt network traffic, enabling the harvesting of vCenter administrator credentials without requiring prior authentication. Successful exploitation can lead to unauthorized access and full administrative control over the vCenter environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.