CF
Vendor
Cloud Foundry Foundation
17
CVEs
0
On KEV
0
New 30D
Products
BO8.8
BOSH
Cloud Foundry Foundation
3 CVEs0 on KEV0 new
BD8.2
BOSH Director
Cloud Foundry Foundation
3 CVEs0 on KEV0 new
CF10.0
cf-deployment
Cloud Foundry Foundation
3 CVEs0 on KEV0 new
BO8.8
bosh-windows-stemcell-builder
Cloud Foundry Foundation
2 CVEs0 on KEV0 new
BC7.5
BOSH CLI
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
BP6.1
bpm-release
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
LO7.5
log-cache_release
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
UA9.2
UAA
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
UA10.0
uaa_release
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
WI7.5
windows-utilities-release
Cloud Foundry Foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47839 | UA UAA Cloud Foundry Foundation | 9.2 | Sep 11 | Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin |
| CVE-2026-47827 | BC BOSH CLI Cloud Foundry Foundation | 7.5 | Aug 21 | CVE-2026-47827 – BOSH CLI Powershell Injection |
| CVE-2026-47831 | BO bosh-windows-stemcell-builder Cloud Foundry Foundation | 7.5 | Jul 9 | Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks |
| CVE-2026-47830 | BO bosh-windows-stemcell-builder Cloud Foundry Foundation | 8.8 | Jul 9 | Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite |
| CVE-2026-47833 | BP bpm-release Cloud Foundry Foundation | 6.1 | Jun 18 | setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow |
| CVE-2026-41010 | BD BOSH Director Cloud Foundry Foundation | 8.2 | Jun 4 | ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value… |
| CVE-2026-41011 | BO BOSH Cloud Foundry Foundation | 8.2 | Jun 4 | PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from… |
| CVE-2026-41858 | WI windows-utilities-release Cloud Foundry Foundation | 7.5 | Jun 4 | Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time… |
| CVE-2026-41859 | BO BOSH Cloud Foundry Foundation | 7.8 | Jun 4 | A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list… |
| CVE-2026-41860 | BO BOSH Cloud Foundry Foundation | 8.8 | Jun 4 | CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM |
| CVE-2026-40965 | UA uaa_release Cloud Foundry Foundation | 10.0 | Jun 1 | Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure |
| CVE-2026-40964 | LO log-cache_release Cloud Foundry Foundation | 7.5 | Jun 1 | Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for… |
| CVE-2026-41704 | BD BOSH Director Cloud Foundry Foundation | 5.0 | May 27 | Compromised VM can make arbitrary blobstore deletes |
| CVE-2026-41009 | BD BOSH Director Cloud Foundry Foundation | 5.8 | May 27 | Local Blobstore may allow arbitrary reads/deletes |