Skip to content
OpenAdvisories

Product · Cloud Foundry

CAPI (Cloud Controller API)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-59387

    Broken access control restriction in Cloud Controller API

    The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3/staging/:guid/droplet…

    Cloud Foundry CF Deployment CAPI (Cloud Controller API)