Cloud Foundry Logo

Security Advisory

CVE-2026-41009 – Local Blobstore may allow arbitrary reads/deletes
Security Advisory

CVE-2026-41009 – Local Blobstore may allow arbitrary reads/deletes

CVE-2026-40964 – Read access to CF logs
Security Advisory

CVE-2026-40964 – Read access to CF logs

CVE-2026-22726 – Route Services Firewall Bypass
Security Advisory

CVE-2026-22726 – Route Services Firewall Bypass

CVE-2026-22734 – UAA SAML 2.0 Signature Bypass
Security Advisory

CVE-2026-22734 – UAA SAML 2.0 Signature Bypass

CVE-2026-22727 – Unprotected internal endpoints
Security Advisory

CVE-2026-22727 – Unprotected internal endpoints

CVE-2026-22723 – UAA User Token Revocation
Security Advisory

CVE-2026-22723 – UAA User Token Revocation

CVE-2025-22246 – UAA Private Key Exposure
Security Advisory

CVE-2025-22246 – UAA Private Key Exposure

CVE-2025-22216 – UAA Missing Zone Validation
Security Advisory

CVE-2025-22216 – UAA Missing Zone Validation

CVE-2024-38826 Cloud Controller Denial of Service Attack
Security Advisory

CVE-2024-38826 Cloud Controller Denial of Service Attack

USN-6621-1: ImageMagick vulnerability
Security Advisory

USN-6621-1: ImageMagick vulnerability

USN-6200-1: ImageMagick vulnerabilities
Security Advisory

USN-6200-1: ImageMagick vulnerabilities