VulnSea

capi_cloud_controller_api vulnerabilities

CVEs whose affected-version data names the capi_cloud_controller_api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59387High· 8.8
1w ago

Broken access control restriction in Cloud Controller API

The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3…

▾ TwilightCloud Foundry · CAPI (Cloud Controller API)EPSS 0.23%via CVEORG
capi_cloud_controller_api vulnerabilities (CVEs) · VulnSea