Cloud Foundry vulnerabilities
80 CVEs and advisories name Cloud Foundry as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-59387Broken access control restriction in Cloud Controller API
- CVE-2026-59385Space Developer can extract space-scoped broker credentials
- CVE-2026-59386Credential exposure to space supporter
- CVE-2026-59396DoS Vulnerability in UAA Related to JWKS URI Handling
- CVE-2026-59357Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
- CVE-2026-59358UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type
- CVE-2026-41012BOSH vSphere CPI Improper Cert Validation
- CVE-2026-59335Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise
- CVE-2026-41005UAA accepts SAML Encrypted Assertions authentication bypass
- CVE-2026-22734Cloud Foundry UAA SAML 2.0 Signature Bypass
- CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure
- CVE-2025-22216CVE-2025-22216 UAA Missing Zone Validation
- CVE-2024-38826CVE-2024-38826 Cloud Controller Denial of Service Attack
- CVE-2024-37082When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP
- CVE-2024-22279GoRouter Denial of Service Attack
- CVE-2023-34061CVE-2023-34061 – Gorouter route pruning
- CVE-2023-34041CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
- CVE-2023-20885CF workflows leak credentials in system audit logs
- CVE-2020-5423Cloud Controller is vulnerable to denial of service via YAML parsing
- CVE-2020-5422UAA password may appear in BOSH System Metrics Server process arguments
- CVE-2020-5420Gorouter is vulnerable to DoS attack via invalid HTTP responses
- CVE-2020-5418Cloud Controller allows users with no roles to list droplets
- CVE-2020-5417Cloud Controller may allow developers to claim sensitive routes
- CVE-2020-5416CF clusters with NGINX in front of them may be vulnerable to DoS
- CVE-2020-5402UAA fails to check the state parameter when authenticating with external IDPs
- CVE-2020-5401Cloud Foundry GoRouter is vulnerable to cache poisoning
- CVE-2020-5400Cloud Controller logs environment variables from app manifests
- CVE-2020-5399CredHub does not properly enable TLS for MySQL database connections
- CVE-2019-11294CAPI leaks service broker URLs and GUIDs to space developers
- CVE-2019-11293UAA logs all query parameters with debug logging level