Vendor

    Cloudfoundry Foundation

    7 known vulnerabilities in products by Cloudfoundry Foundation, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cloudfoundry Foundation
    CriticalCVE-2026-47826

    blobs.yaml Path Traversal Allows File Writes

    also in 1 other product

    		9.1
    HighCVE-2026-47829

    CloudFoundry Foundation Bosh-cli: Argument Injection

    also in 1 other product

    		7.8
    CriticalCVE-2026-47840

    LDAP StartTLS unconditionally disables hostname verification

    		7.5
    HighCVE-2026-41013

    Tenant-controlled comma smuggles arbitrary CIFS mount options

    		8.1
    MediumCVE-2026-22723

    UAA User Token Revocation logic error

    also in 2 other products

    		6.5
    MediumCVE-2026-41861

    Arbitrary Root File Write via Path Traversal in BOSH agent

    		4.2
    MediumCVE-2026-22726

    Route Services Firewall Bypass

    also in 2 other products

    		5.0

    News

    Products

    Products by Cloudfoundry Foundation
    Cf Deployment30