Filtered by vendor Cloudfoundry Subscriptions
Filtered by product Cloud Foundry Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-22727 1 Cloudfoundry 1 Cloud Foundry 2026-03-19 7.5 High
Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing them to access secure application information.
CVE-2024-38826 1 Cloudfoundry 1 Cloud Foundry 2025-03-18 N/A
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release