[ Vendor · 2 CVEs ]
Cloud Foundry
CVEs affecting Cloud Foundry published in the last 30 days, plus any Cloud Foundry CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-59357 | 6 Oct 2026 | CVSS 6.5 | Cloud Foundry UAAInsufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive)… | |
| CVE-2026-59358 | 6 Oct 2026 | CVSS 7.6 | Cloud Foundry UAAImproper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user… |