Skip to content

Product

cloudfoundry Cloud Foundry vulnerabilities

2 published CVES affecting cloudfoundry Cloud Foundry, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest cloudfoundry Cloud Foundry CVEs

Newest publication first

  1. CVE-2026-22727 Cloud Foundry unprotected internal endpoints

    Published
    HighCVSS 7.5

    Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing them to access secure application...

  2. CVE-2024-38826 CVE-2024-38826 Cloud Controller Denial of Service Attack

    Published
    MediumCVSS 5.3

    Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release versio...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.