Advisories · Technology

CloudFoundry Foundation Cf-deployment.

Every CVE that names CloudFoundry Foundation Cf-deployment among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47840 CVE record

CVSS 8.3 High

LDAP StartTLS unconditionally disables hostname verification
- CloudFoundry Foundation UAA
- CloudFoundry Foundation Cf-deployment
Not analysed yet 9 Jul 2026
CVE-2026-41013 CVE record

CVSS 8.1 High

Tenant-controlled comma smuggles arbitrary CIFS mount options
- CloudFoundry Foundation smb-volume-release
- CloudFoundry Foundation CF Deployment
- Command injection
Not analysed yet 1 Jun 2026
CVE-2026-22726 CVE record

CVSS 5.0 Medium

Route Services Firewall Bypass
- CloudFoundry Foundation Routing release
- CloudFoundry Foundation CF Deployment
- CWE-923
Not analysed yet 30 Apr 2026