UBUNTU-CVE-2026-47832: Medium severity ubuntu/bosh vulnerability
Published Nov 12, 2026
·Updated
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)
Affected Software
7 affected components
ubuntu/bosh*
ubuntu/bosh*
ubuntu/bosh*
ubuntu/bosh*
ubuntu/bosh*
ubuntu/bosh*
ubuntu/bosh*
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who could obtain the exposed application credentials?
Anyone who can access BOSH debug logs may be able to obtain application credentials, because the credentials can be logged in cleartext.