CF
Vendor
CloudFoundry Foundation
10
CVEs
0
On KEV
0
New 30D
Products
CF8.1
Cf-deployment
CloudFoundry Foundation
3 CVEs0 on KEV0 new
UA7.5
UAA
Cloudfoundry Foundation
2 CVEs0 on KEV0 new
BO4.2
BOSH
CloudFoundry Foundation
1 CVEs0 on KEV0 new
BO7.8
bosh-cli
CloudFoundry Foundation
1 CVEs0 on KEV0 new
BC9.1
BOSH CLI tool
CloudFoundry Foundation
1 CVEs0 on KEV0 new
RR5.0
Routing release
CloudFoundry Foundation
1 CVEs0 on KEV0 new
SM8.1
smb-volume-release
CloudFoundry Foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41861 | BO BOSH CloudFoundry Foundation | 4.2 | Aug 6 | Arbitrary Root File Write via Path Traversal in BOSH agent |
| CVE-2026-47840 | UA UAA CloudFoundry Foundation | 7.5 | Jul 9 | LDAP StartTLS unconditionally disables hostname verification |
| CVE-2026-47829 | BO bosh-cli CloudFoundry Foundation | 7.8 | Jul 9 | Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director |
| CVE-2026-47826 | BC BOSH CLI tool CloudFoundry Foundation | 9.1 | Jul 9 | blobs.yaml Path Traversal Allows File Writes |
| CVE-2026-41013 | CD CF Deployment CloudFoundry Foundation | 8.1 | Jun 1 | Tenant-controlled comma smuggles arbitrary CIFS mount options |
| CVE-2026-22726 | CD CF Deployment CloudFoundry Foundation | 5.0 | Apr 30 | Route Services Firewall Bypass |
| CVE-2026-22723 | UA UAA Cloudfoundry Foundation | 6.5 | Mar 5 | UAA User Token Revocation logic error |