CloudFoundry Foundation

Products

Exploited and recent CVEs

• CVE-2026-41861 Medium 4.2 Arbitrary Root File Write via Path Traversal in BOSH agent 0.2%
• CVE-2026-47840 High 7.5 LDAP StartTLS unconditionally disables hostname verification 0.2%
• CVE-2026-47840 High 7.5 LDAP StartTLS unconditionally disables hostname verification 0.2%
• CVE-2026-47829 High 8.3 Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director 0.4%
• CVE-2026-47826 High 8.8 blobs.yaml Path Traversal Allows File Writes 0.5%
• CVE-2026-41013 High 8.1 Tenant-controlled comma smuggles arbitrary CIFS mount options 0.2%
• CVE-2026-41013 High 8.1 Tenant-controlled comma smuggles arbitrary CIFS mount options 0.2%
• CVE-2026-22726 Medium 5.0 Route Services Firewall Bypass 0.2%
• CVE-2026-22726 Medium 5.0 Route Services Firewall Bypass 0.2%
• CVE-2026-22723 Medium 6.5 UAA User Token Revocation logic error 0.3%