Skip to contentCloud Foundry Foundation Bosh vulnerabilities
- cloud foundry foundation bosh cliCVE-2026-47827 – BOSH CLI Powershell InjectionCVE-2026-478277.5 High
- cloud foundry foundation bosh-windows-stemcell-builderCryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force AttacksCVE-2026-478317.7 High
- cloud foundry foundation bosh-windows-stemcell-builderIncorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable OverwriteCVE-2026-478308.5 High
- cloud foundry foundation bosh directorReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(...CVE-2026-410108.7 High
- cloud foundry boshPackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, ...CVE-2026-410118.7 High
- cloud foundry boshA network man-in-the-middle between nats-sync and the BOSH director can steal the director...CVE-2026-418597.1 High
- cloud foundry boshCWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token...CVE-2026-418607.1 High
- cloud foundry foundation bosh director, cloud foundry bosh +1 moreCompromised VM can make arbitrary blobstore deletesCVE-2026-417046.8 Medium
- cloud foundry foundation bosh director, cloud foundry bosh +1 moreLocal Blobstore may allow arbitrary reads/deletesCVE-2026-410094.3 Medium