Skip to content

Product

Cloud Foundry UUA vulnerabilities

1 published CVE affecting Cloud Foundry UUA, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Cloud Foundry UUA CVEs

Newest publication first

  1. CVE-2026-22734 Cloud Foundry UAA SAML 2.0 Signature Bypass

    Published
    HighCVSS 8.6 EPSS 0.36%

    Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer assertions that are...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.