Cloud Foundry Foundation CF Deployment

• CVE-2026-59388 Medium 6.5 Cloud Controller exposes secrets in audit log 0.3%
• CVE-2026-47839 Critical 9.2 Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin 0.3%
• CVE-2026-40965 Critical 10.0 Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadvertently exposed thro 0.3%
• CVE-2026-40964 High 7.5 Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and pla 0.4%