VDB
CVE-2026-22734
CVE-2026-22734
PUBLISHED
CVSS 8.6 HIGH
Reported by vmware · Published April 16, 2026
Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer assertions that are neither signed nor encrypted. This issue affects UUA from v77.30.0 to v78.7.0 (inclusive) and it affects CF Deployment from v48.7.0 to v54.14.0 (inclusive).
EPSS 0.36% · 29.1th percentile
Risk Scores
CVSS 3.1
8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.36%
29.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | UUA | v77.21.0 |
| Cloud Foundry | UUA | v77.21.0 |
Timeline
- Apr 16, 2026 CVE Published
- Apr 17, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
- May 27, 2026 EPSS Score