Cloud Foundry Cf-deployment vulnerabilities

• cloud foundry capi (cloud controller api), cf-deployment +1 more Broken access control restriction in Cloud Controller API CVE-2026-59387 8.8 HighOctober 30, 2026
• cloud foundry cf-deployment, cloud foundry foundation capi (cloud foundry controller) +1 more Cloud Controller exposes secrets in audit log CVE-2026-59388 6.5 MediumOctober 30, 2026
• cloud foundry cf-deployment, controller (capi) +1 more Credential exposure to space supporter CVE-2026-59386 6.5 MediumOctober 30, 2026
• cloud foundry uaa, cf-deployment +1 more DoS Vulnerability in UAA Related to JWKS URI Handling CVE-2026-59396 6.9 MediumOctober 30, 2026
• cloud foundry uaa, cf-deployment +1 more Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions CVE-2026-59357 6.5 MediumOctober 6, 2026
• cloud foundry uaa, cf-deployment +1 more UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type CVE-2026-59358 Public exploit 7.6 HighOctober 6, 2026
• cloud foundry foundation uaa, cloud foundry cf-deployment +1 more Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin CVE-2026-47839 9.2 CriticalSeptember 11, 2026
• cloud foundry uaa, cf-deployment +1 more Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise CVE-2026-59335 8.7 HighAugust 25, 2026
• cloud foundry cf-deployment, cloudfoundry foundation uaa +1 more LDAP StartTLS unconditionally disables hostname verification CVE-2026-47840 8.3 HighJuly 9, 2026
• cloud foundry cf-deployment, credhub, uaa release (oss) +2 more +4 more Java Projects using HTTP to fetch dependencies CVE-2019-3801 8.7 HighApril 25, 2019