Advisories · Technology

Cloud Foundry Foundation cf-deployment.

Every CVE that names Cloud Foundry Foundation cf-deployment among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59388 CVE record

CVSS 6.5 Medium

Cloud Controller exposes secrets in audit log
- Cloud Foundry Foundation CAPI (Cloud Foundry Controller)
- Cloud Foundry Foundation cf-deployment
- Information disclosure
Not analysed yet 30 Oct 2026
CVE-2026-47839 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin
- Cloud Foundry Foundation UAA
- Cloud Foundry Foundation cf-deployment
- Broken access control
Not analysed yet 11 Sept 2026
CVE-2026-40965 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Information disclosure in Cloud Foundry Foundation uaa_release and others
- Cloud Foundry Foundation uaa_release
- Cloud Foundry Foundation CF Deployment
- Information disclosure
Not analysed yet 1 Jun 2026
CVE-2026-40964 CVE record

CVSS 7.5 High

Improper authentication in Cloud Foundry Foundation log-cache_release and others
- Cloud Foundry Foundation log-cache_release
- Cloud Foundry Foundation CF Deployment
- Authentication bypass
Not analysed yet 1 Jun 2026