CAPI (Cloud Controller API) vulnerabilities

1 known vulnerability in CAPI (Cloud Controller API) from Cloud Foundry. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CAPI (Cloud Controller API): Improper Access Control

  CVE-2026-59387Oct 30, 2026Cloud Foundry

  The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the staging callback endpoints /internal/v3/staging/:guid/droplet_