Skip to content
OpenAdvisories

Product · Cloud Foundry

bosh-vsphere-cpi-release

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-41012

    BOSH vSphere CPI Improper Cert Validation

    Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrast…

    Cloud Foundry bosh-vsphere-cpi-release Virtualization