Cloudfoundry Cloud Foundry vulnerabilities

2 CVEs affecting Cloudfoundry Cloud Foundry, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22727, published 2026-03-17.

More from Cloudfoundry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-38826, published 2024-11-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud…
• CVE-2026-22727, published 2026-03-17. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially…