Vendor

    Cloud Foundry Foundation

    15 known vulnerabilities in products by Cloud Foundry Foundation, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cloud Foundry Foundation
    HighCVE-2026-47827

    Cloud Foundry Foundation BOSH CLI: Command Injection

    		7.5
    CriticalCVE-2026-47839

    Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin

    		—
    CriticalCVE-2026-40965

    Cloud Foundry Foundation Uaa Release: Exposure of Sensitive Information to an Unauthorized Actor

    		10.0
    MediumCVE-2026-59388

    Cloud Controller exposes secrets in audit log

    		6.5
    HighCVE-2026-40964

    Cloud Foundry Foundation Log-cache Release: Improper Authentication

    		7.5
    HighCVE-2026-47830

    Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

    		8.8
    HighCVE-2026-47831

    Cloud Foundry Foundation Bosh-windows-stemcell-builder: security vulnerability

    		7.5
    HighCVE-2026-41860

    Cloud Foundry Foundation BOSH: Inadequate Encryption Strength

    		8.8
    HighCVE-2026-41010

    Cloud Foundry Foundation BOSH Director: OS Command Injection

    		8.2
    HighCVE-2026-41011

    Cloud Foundry Foundation BOSH: OS Command Injection

    		8.2
    HighCVE-2026-41859

    Cloud Foundry Foundation BOSH: Improper Certificate Validation

    		7.8
    MediumCVE-2026-47833

    Cloud Foundry Foundation Bpm-release: Link Following

    		6.1
    HighCVE-2026-41858

    Cloud Foundry Foundation Windows-utilities-release: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    		6.5
    MediumCVE-2026-41704

    Compromised VM can make arbitrary blobstore deletes

    also in 1 other product

    		5.0
    MediumCVE-2026-41009

    Local Blobstore may allow arbitrary reads/deletes

    also in 1 other product

    		5.8

    Products

    Products by Cloud Foundry Foundation
    Cf Deployment40
    Bosh30
    Bosh Director30