CVE-2026-22727

HIGH

7.5

Beschreibung

Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing them to access secure application information.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorADJACENT_NETWORK

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/17/2026

Zuletzt geandert3/18/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-306

Referenzen

https://www.cloudfoundry.org/blog/cve-2026-22727-unprotected-internal-endpoints(security@vmware.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.