Understanding and Defending Against CVE-2026-41012: Traffic Interception Vulnerability in BOSH Director vCenter CPI
CVE-2026-41012 is a traffic interception vulnerability in the BOSH Director vCenter CPI that allows attackers to impersonate the vCenter REST API and capture administrator credentials via HTTP Basic auth. This leads to complete virtualization infrastructure takeover. The vulnerability stems from insufficient authentication security in the communication protocol between BOSH Director and vCenter, specifically the lack of proper certificate validation and pinning.