Skip to content

CyberSIXT Search

Vendor

Cloud Foundry

No Cloud Foundry CVE is in the CISA KEV catalogue.

Tracked since 8 Jun · latest article Wed 17 Jun · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds: 0; ≥ p95, not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No Cloud Foundry CVE is in the CISA KEV catalogue.

Products

2 products · 2 CVEs in coverage

UAA1 CVEs · 0 in KEVlatest 17 Jun uaa_release1 CVEs · 0 in KEVlatest 8 Jun

Coverage

2 articles · all timeFull timeline →

Two articles so far, 8 Jun to 17 Jun.

Mon 8 Jun · first reportCloud Foundry UAA bug exposes private keys, CVE-2026-40965SecurityOnline
Wed 17 JunCritical Cloud Foundry UAA bug enables SAML bypass, CVE-2026-41005SecurityOnline

See the full timeline

17 JunCritical Cloud Foundry UAA bug enables SAML bypass, CVE-2026-41005SecurityOnline
8 JunCloud Foundry UAA bug exposes private keys, CVE-2026-40965SecurityOnline

All CVEs in coverage

2

CVE-2026-40965Cloud Foundry Foundation uaa_release vulnerabilityCVSS10.0Critical–Not in KEV0.3%EPSS1article

CVE-2026-41005UAA accepts SAML Encrypted Assertions authentication bypassCVSS9.0Critical–Not in KEV0.1%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

High exploit odds means FIRST EPSS percentile ≥ 95, excluding entries in CISA KEV.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.