Skip to content
OpenAdvisories

Vendor

Cloud Foundry Foundation

15 known vulnerabilities.

Products

cf-deployment 4 BOSH 3 BOSH Director 3 bosh-windows-stemcell-builder 2 UAA 1 uaa_release 1 BOSH CLI 1 bpm-release 1 CAPI (Cloud Foundry Controller) 1 windows-utilities-release 1 log-cache_release 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2026-47827

    CVE-2026-47827 – BOSH CLI Powershell Injection

    Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

    Cloud Foundry Foundation BOSH CLI
  • High 7.5
    CVE-2026-47831

    Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks

    Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versio…

    Cloud Foundry Foundation bosh-windows-stemcell-builder Windows
  • High 8.8
    CVE-2026-47830

    Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

    Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service res…

    Cloud Foundry Foundation bosh-windows-stemcell-builder Windows
  • High 8.2
    CVE-2026-41010

    ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', …

    Cloud Foundry Foundation BOSH Director
  • High 8.2
    CVE-2026-41011

    PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz"…

    Cloud Foundry Foundation BOSH
  • High 7.8
    CVE-2026-41859

    A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth head…

    Cloud Foundry Foundation BOSH
  • High 8.8
    CVE-2026-41860

    CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRe…

    Cloud Foundry Foundation BOSH
  • High 7.5
    CVE-2026-40964

    Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote a…

    Cloud Foundry Foundation cf-deployment log-cache_release