New Critical Vulnerability (CVE-2026-41012) Disclosed in BOSH Director vCenter CPI

NIST has published details on CVE-2026-41012, a traffic interception vulnerability in BOSH Director vCenter CPI. Attackers positioned between BOSH Director and vCenter can impersonate the vCenter REST API, capturing administrator credentials via HTTP Basic authentication and potentially leading to a complete takeover of the virtualization infrastructure.