Cloud Foundry CAPI (Cloud Controller API) vulnerabilities (CVE)

CVE records published for Cloud Foundry CAPI (Cloud Controller API), newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2026-59387 13 days ago

Broken access control restriction in Cloud Controller API

Cloud Foundry CAPI (Cloud Controller API); Cloud Foundry cf-deployment

The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3/staging/:guid/droplet…