Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how cloud foundry compares to other vendors in security performance

View Risk Score →

Cloud Foundry UAALDAP StartTLS unconditionally disables hostname verification

Risk 67
Severity
9.3
First published (updated )
CVE-2026-47840

Cloud Foundry UAAUAA accepts SAML Encrypted Assertions authentication bypass

Risk 78
Severity
9
First published (updated )
CVE-2026-41005

Cloud Foundry BOSH DirectorOS Command Injection

Risk 63
Severity
8.7
First published (updated )
CVE-2026-41010

Cloud Foundry BoshOS Command Injection

Risk 63
Severity
8.7
First published (updated )
CVE-2026-41011

Cloud Foundry BoshA network man-in-the-middle between nats-sync and the BOSH director can steal the director credentia…

Risk 69
Severity
7.1
First published (updated )
CVE-2026-41859
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cloud Foundry BoshWeak Encryption

Risk 72
Severity
7.1
First published (updated )
CVE-2026-41860

Cloud Foundry UAAInfoleak

Risk 78
Severity
10
First published (updated )
CVE-2026-40965

Cloud Foundry BOSH DirectorCompromised VM can make arbitrary blobstore deletes

Risk 32
Severity
6.8
First published (updated )
CVE-2026-41704

Cloud Foundry BOSH DirectorLocal Blobstore may allow arbitrary reads/deletes

Risk 35
Severity
4.3
First published (updated )
CVE-2026-41009

Cloud Foundry routing-releaseRoute Services Firewall Bypass

Risk 26
Severity
5
First published (updated )
CVE-2026-22726
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cloud Foundry UAACloud Foundry UAA SAML 2.0 Signature Bypass

Risk 49
Severity
8.6
First published (updated )
CVE-2026-22734

Cloud Foundry CAPICloud Foundry unprotected internal endpoints

Risk 70
Severity
7.5
First published (updated )
CVE-2026-22727

Cloud Foundry UAA– UAA Private Key Exposure

Risk 43
Severity
7.5
First published (updated )
CVE-2025-22246

Cloud Foundry CAPICloud Controller Denial of Service Attack

Risk 26
Severity
5.3
First published (updated )
CVE-2024-38826

Cloud Foundry haProxy BOSH ReleaseHAProxy Authentication Bypass

Risk 66
Severity
9.1
First published (updated )
CVE-2024-37082
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cloud Foundry Bosh System Metrics ServerUAA password may appear in BOSH System Metrics Server process arguments

Risk 38
Severity
6.5
First published (updated )
CVE-2020-5422

Cloud Foundry BoshBosh Deployment logs leak sensitive information

Risk 69
Severity
7.8
First published (updated )
CVE-2019-11271

Cloud Foundry Bits ServiceTiming attack allows extraction of signing key in Bits Service

Risk 60
Severity
8.1
First published (updated )
CVE-2018-15800

Cloud Foundry Cf-networkingCF networking internal policy server SQL injection

Risk 79
Severity
8.8
First published (updated )
CVE-2018-15755

Cloud Foundry BoshBosh accepts refresh tokens in place of an access token

Risk 70
Severity
8.4
First published (updated )
CVE-2018-11083
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cloud Foundry BoshAn issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and a…

Risk 79
Severity
8.8
First published (updated )
CVE-2017-4961

Cloud Foundry DiegoCloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service.

Risk 43
Severity
7.5
First published (updated )
CVE-2016-3091

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203