Snapshot of public data from 30 Oct 2026, 10:41:14. This data is not updated until the API is deployed.

TACTICThreat Analysis & Cyber Threat Intelligence Center
System themeFrançais

Back to the watch

CVE-2026-59387

Cloud Foundry CAPI (Cloud Controller API)

NormalCVSS 8.8 v3.1

Why this priority

?

Generic watch priority computed by public, versioned rules. It does not know your assets. See the glossary

  • Score CVSS élevé (7.0 ou plus)

Description

This source does not allow its text to be republished here. Read the record at the source.

Affected products

VendorProductVersions
Cloud FoundryCAPI (Cloud Controller API)
  • before v1.247.0
Cloud Foundrycf-deployment
  • before 60.7.0

Revision history

  1. Revision 1

    New record

Qualification

CVSS severity
?

Technical severity score between 0 and 10, with its version (3.1, 4.0). See the glossary

8.8 HIGH CVSS v3.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
KEV catalog
?

CISA catalog of vulnerabilities with confirmed exploitation. Absence from the catalog does not prove absence of exploitation. See the glossary

Unknown
Exploitation
Unknown
EPSS probability
?

Probability, between 0 and 1, that a vulnerability is exploited in the next 30 days, published daily by FIRST. Always dated. See the glossary

Unknown
Confidence
?

Quality of the sources behind the record. It is not a risk score. See the glossary

High

Priority rules, version 1

Record

Published on
30 October 2026

Sources

References

CVE-2026-59387 Cloud Foundry CAPI (Cloud Controller API) · Avanguard TACTIC