What’s Vulnerable › Products

CloudFoundry Foundation bosh-cli vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your CloudFoundry Foundation bosh-cli version is affected

Latest CloudFoundry Foundation bosh-cli vulnerabilities

• CVE-2026-47829 — Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director (CVSS 7.8)
• CVE-2026-47828 — Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay (CVSS 8.8)
• CVE-2026-47826 — blobs.yaml Path Traversal Allows File Writes (CVSS 9.1)
• CVE-2026-41857 — BOSH CLI Shell Injection (CVSS 7.1)