CF
Vendor security profile
Cloud Foundry
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
2
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.5
CVE-2026-59357
Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
CF
Patch status unknownEPSS %0
7.6
CVE-2026-59358
UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type
CF
Patch status unknownEPSS %0
9.2
CVE-2026-47839
Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin
CF
Patch status unknownEPSS %0
7.7
CVE-2026-41012
BOSH vSphere CPI Improper Cert Validation
CF
Patch status unknownEPSS %0
8.7
CVE-2026-59335
Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise
CF
Patch status unknownEPSS %1
7.5
CVE-2026-47827
CVE-2026-47827 – BOSH CLI Powershell Injection
CF
Patch status unknownEPSS %2