CVE-2026-41859 — A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the — CVE Database · The Intelligence Room