Vulnerability · Published Apr 16, 2026 · Assigned by vmware
CVE-2026-22734Cloud Foundry UAA SAML 2.0 Signature Bypass
High 8.6
In plain English
A high-severity authentication bypass by spoofing in UUA from Cloud Foundry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Official description
Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer assertions that are neither signed nor encrypted. This issue affects UUA from v77.30.0 to v78.7.0 (inclusive) and it affects CF Deployment from v48.7.0 to v54.14.0 (inclusive).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | UUA | v77.21.0 – through v78.8.0 |
Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N