Cloud Foundry Foundation has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 9.2 (critical), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 9.2
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-284 1

Products

UAA 1

Follow Cloud Foundry Foundation:RSS feed Save a search →Embed badge ↗

1

Total CVEs

1

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-47839Critical· 9.2A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration51

Cloud Foundry Foundation vulnerabilities

CVEs affecting Cloud Foundry Foundation, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-47839Critical· 9.2

A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration

A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an …

▾ MidnightCloud Foundry Foundation · UAAEPSS 0.31%via NVD

Cloud Foundry Foundation vulnerabilities (CVEs) · VulnSea