CF
Product
cf-deployment
3
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 0Low 0
Watch
Add cf-deployment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40965 | 10.0 | Jun 1 | Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure Affected: 30.0.0 before 56.1.0 |
| CVE-2026-47839 | 9.2 | Sep 11 | Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin Affected: through 48.9.0 |
| CVE-2026-40964 | 7.5 | Jun 1 | Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for… Affected: 12.44.0 through 55.2.0 |
Showing 3