Cloud Foundry Foundation

Products

Exploited and recent CVEs

• CVE-2026-59388 Medium 6.5 Cloud Controller exposes secrets in audit log 0.3%
• CVE-2026-59388 Medium 6.5 Cloud Controller exposes secrets in audit log 0.3%
• CVE-2026-47839 Critical 9.2 Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin 0.3%
• CVE-2026-47839 Critical 9.2 Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin 0.3%
• CVE-2026-47827 High 7.5 CVE-2026-47827 – BOSH CLI Powershell Injection 1.6%
• CVE-2026-47831 High 7.5 Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks 0.3%
• CVE-2026-47830 High 8.8 Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite 0.1%
• CVE-2026-47833 Medium 6.1 setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host 0.2%
• CVE-2026-41010 High 8.2 ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from 0.1%
• CVE-2026-41011 High 8.2 PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release.MF inside the uploa 0.1%
• CVE-2026-41858 Medium 6.5 Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a sm 0.2%
• CVE-2026-41859 High 7.8 A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the <0.1%
• CVE-2026-41860 High 8.8 CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-cod <0.1%
• CVE-2026-40965 Critical 10.0 Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadvertently exposed thro 0.3%
• CVE-2026-40965 Critical 10.0 Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadvertently exposed thro 0.3%
• CVE-2026-40964 High 7.5 Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and pla 0.4%
• CVE-2026-40964 High 7.5 Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and pla 0.4%
• CVE-2026-41704 Medium 5.0 Compromised VM can make arbitrary blobstore deletes <0.1%
• CVE-2026-41009 Medium 5.8 Local Blobstore may allow arbitrary reads/deletes <0.1%