CF
Vendor security profile
Cloud Foundry
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
2
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.5
CVE-2026-59357Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
Patch status unknownEPSS %0
7.6
9.2
CVE-2026-47839Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin
Patch status unknownEPSS %0
7.7
CVE-2026-41012BOSH vSphere CPI Improper Cert Validation
Patch status unknownEPSS %0
8.7
7.5
CVE-2026-47827CVE-2026-47827 – BOSH CLI Powershell Injection
Patch status unknownEPSS %2