Cloud Foundry Capi vulnerabilities

• cloud foundry capi (cloud controller api), cf-deployment +1 more Broken access control restriction in Cloud Controller API CVE-2026-59387 8.8 HighOctober 30, 2026
• cloud foundry capi (cloud foundry controller), cf deployment +1 more Space Developer can extract space-scoped broker credentials CVE-2026-59385 2.7 LowOctober 30, 2026
• cloud foundry cf-deployment, controller (capi) +1 more Credential exposure to space supporter CVE-2026-59386 6.5 MediumOctober 30, 2026
• cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more Cloud Controller is vulnerable to denial of service via YAML parsing CVE-2020-5423 7.5 HighDecember 2, 2020
• cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more Cloud Controller allows users with no roles to list droplets CVE-2020-5418 3.1 LowSeptember 3, 2020
• cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more Cloud Controller may allow developers to claim sensitive routes CVE-2020-5417 8.5 HighAugust 21, 2020
• cloud foundry capi, cloudfoundry capi-release, cf-deployment +2 more Cloud Controller logs environment variables from app manifests CVE-2020-5400 8.0 HighFebruary 27, 2020
• cloud foundry capi, cloudfoundry capi-release, cf-deployment +2 more CAPI leaks service broker URLs and GUIDs to space developers CVE-2019-11294 4.3 MediumDecember 19, 2019
• cloud foundry capi-release Escalation of Privileges in Cloud Controller CVE-2019-3798 6.0 MediumApril 17, 2019
• cloud foundry capi, cloudfoundry capi-release +1 more Cloud Controller provides signed URL with write authorization to read only user CVE-2019-3785 6.5 MediumMarch 13, 2019