UUA vulnerabilities

1 known vulnerability in UUA from Cloud Foundry. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  UUA: Authentication Bypass by Spoofing

  CVE-2026-22734Apr 17, 2026Cloud Foundry

  Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer