Cloud FOundry CF Deployment

• CVE-2026-59387 High 8.8 Broken access control restriction in Cloud Controller API 0.2%
• CVE-2026-59385 Low 2.7 Space Developer can extract space-scoped broker credentials 0.2%
• CVE-2026-59386 Medium 6.5 Credential exposure to space supporter 0.2%
• CVE-2026-59396 Medium 4.9 DoS Vulnerability in UAA Related to JWKS URI Handling 0.3%
• CVE-2026-59357 Medium 6.5 Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions 0.2%
• CVE-2026-59358 High 7.6 UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type 0.4%
• CVE-2026-59335 High 8.7 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise 0.5%
• CVE-2026-41005 Critical 9.0 UAA accepts SAML Encrypted Assertions authentication bypass 0.1%
• CVE-2025-22246 Low 3.0 CVE-2025-22246 – UAA Private Key Exposure 0.2%
• CVE-2023-34061 High 7.5 CVE-2023-34061 – Gorouter route pruning 0.5%
• CVE-2023-34041 Medium 5.3 CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter 0.4%
• CVE-2020-5423 High 7.5 Cloud Controller is vulnerable to denial of service via YAML parsing 1.1%
• CVE-2020-5420 High 7.7 Gorouter is vulnerable to DoS attack via invalid HTTP responses 1.2%
• CVE-2020-5418 Low 3.1 Cloud Controller allows users with no roles to list droplets 0.6%
• CVE-2020-5417 High 8.5 Cloud Controller may allow developers to claim sensitive routes 1.0%
• CVE-2020-5416 High 7.7 CF clusters with NGINX in front of them may be vulnerable to DoS 1.2%