CVE-2026-59386: falha de média gravidade em Cloud Foundry cf-deployment
Credential exposure to space supporter
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.2%
A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVEs relacionadas — Cloud Foundry cf-deployment
No mesmo produto, das mais perigosas para as menos.
CVE-2019-3801HIGHJava Projects using HTTP to fetch dependenciesEPSS 0.6%CVE-2026-59335HIGHCase-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA CompromiseEPSS 0.5%CVE-2026-59358HIGHUAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant typeEPSS 0.4%CVE-2026-59396MEDIUMDoS Vulnerability in UAA Related to JWKS URI HandlingEPSS 0.3%CVE-2026-59387HIGHBroken access control restriction in Cloud Controller APIEPSS 0.2%CVE-2026-59357MEDIUMSelf-UAA OIDC Configuration allows JWT injection to establish unauthorized sessionsEPSS 0.2%