Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Cloud Foundry Foundation — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting Cloud Foundry Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data specifically for the vendor Cloud Foundry Foundation, focusing on software weaknesses within their open-source platform ecosystem. The collection encompasses a broad spectrum of security flaws, including memory corruption, privilege escalation, and authentication bypasses, spanning advisories issued from the project's inception to the present day. Users can utilize this resource to track the vendor's official security advisories over time, analyze the prevalence and impact of specific weakness classes across different releases, or review the complete historical vulnerability record for individual Cloud Foundry components. By centralizing these details, the page provides a clear view of the security posture evolution for the platform, enabling administrators and developers to make informed decisions regarding patching and risk mitigation. The data reflects the ongoing efforts of the foundation to identify and resolve issues, offering a transparent timeline of security improvements without highlighting specific incident details or CVE identifiers. This structured overview supports comprehensive security assessments and helps organizations maintain compliance with their internal vulnerability management policies while staying updated on the latest threats affecting the Cloud Foundry environment.

CVE ID Title CVSS Severity Published
CVE-2026-47839 Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin — UAA 9.2 Critical 2026-09-11
CVE-2026-47827 CVE-2026-47827 – BOSH CLI Powershell Injection — BOSH CLI 7.5 High 2026-08-21
CVE-2026-47831 Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks — bosh-windows-stemcell-builder - - 2026-07-09
CVE-2026-47830 Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite — bosh-windows-stemcell-builder - - 2026-07-09
CVE-2026-47833 Cloud Foundry Foundation bpm-release 后置链接漏洞 — bpm-release CWE-59 6.1 Medium 2026-06-18
CVE-2026-41010 Cloud Foundry BOSH Director 安全漏洞 — BOSH Director CWE-78 8.2 High 2026-06-04
CVE-2026-41011 Cloud Foundry BOSH 安全漏洞 — BOSH CWE-78 8.2 High 2026-06-04
CVE-2026-41858 Cloud Foundry windows-utilities-release 安全漏洞 — windows-utilities-release CWE-338 6.5 High 2026-06-04
CVE-2026-41859 Cloud Foundry BOSH 安全漏洞 — BOSH CWE-295 7.8 High 2026-06-04
CVE-2026-41860 Cloud Foundry BOSH 安全漏洞 — BOSH CWE-326 8.8 High 2026-06-04
CVE-2026-40965 Cloud Foundry UAA 安全漏洞 — uaa_release CWE-200 10.0 Critical 2026-06-01
CVE-2026-40964 Cloud Foundry Foundation 安全漏洞 — log-cache_release CWE-287 7.5 High 2026-06-01
CVE-2026-41704 Compromised VM can make arbitrary blobstore deletes — BOSH Director CWE-284 5.0 Medium 2026-05-27
CVE-2026-41009 Local Blobstore may allow arbitrary reads/deletes — BOSH Director CWE-22 5.8 Medium 2026-05-27

This page lists every published CVE security advisory associated with Cloud Foundry Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.