Cloud Foundry Foundation vulnerabilities

Products

• Bosh 3
• Bosh Director 3
• Bosh-windows-stemcell-builder 2
• Capi (cloud Foundry Controller) 2
• Cf Deployment 2
• Cf-deployment 2

Newest

• cloud foundry capi (cloud foundry controller), cf deployment +1 more Space Developer can extract space-scoped broker credentials CVE-2026-59385 2.7 LowOctober 30, 2026
• cloud foundry cf-deployment, cloud foundry foundation capi (cloud foundry controller) +1 more Cloud Controller exposes secrets in audit log CVE-2026-59388 6.5 MediumOctober 30, 2026
• cloud foundry foundation uaa, cloud foundry cf-deployment +1 more Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin CVE-2026-47839 9.2 CriticalSeptember 11, 2026
• cloud foundry foundation bosh cli CVE-2026-47827 – BOSH CLI Powershell Injection CVE-2026-47827 7.5 HighAugust 21, 2026
• cloud foundry foundation bosh-windows-stemcell-builder Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks CVE-2026-47831 7.7 HighJuly 9, 2026
• cloud foundry foundation bosh-windows-stemcell-builder Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite CVE-2026-47830 8.5 HighJuly 9, 2026
• cloud foundry foundation bpm-release setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation... CVE-2026-47833 6.8 MediumJune 18, 2026
• cloud foundry foundation bosh director ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(... CVE-2026-41010 8.7 HighJune 4, 2026
• cloud foundry bosh PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, ... CVE-2026-41011 8.7 HighJune 4, 2026
• cloud foundry foundation windows-utilities-release Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH... CVE-2026-41858 6.5 MediumJune 4, 2026
• cloud foundry bosh A network man-in-the-middle between nats-sync and the BOSH director can steal the director... CVE-2026-41859 7.1 HighJune 4, 2026
• cloud foundry bosh CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token... CVE-2026-41860 7.1 HighJune 4, 2026
• cloud foundry foundation cf deployment, uaa release +1 more Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure.... CVE-2026-40965 10.0 CriticalJune 1, 2026
• cloud foundry foundation cf deployment, log-cache release +1 more Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an... CVE-2026-40964 7.5 HighJune 1, 2026
• cloud foundry foundation bosh director, cloud foundry bosh +1 more Compromised VM can make arbitrary blobstore deletes CVE-2026-41704 6.8 MediumMay 27, 2026
• cloud foundry foundation bosh director, cloud foundry bosh +1 more Local Blobstore may allow arbitrary reads/deletes CVE-2026-41009 4.3 MediumMay 27, 2026