Dashboard / CVE-2026-59386

CVE-2026-59386

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 58/100
Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: High
A: None

Description

A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper privileges. This privilege escalation enables unauthorized retrieval of service credentials through malicious start commands or custom buildpacks.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Cloud Foundry Cloud Foundry Controller (CAPI) 0
Cloud Foundry Cloud Foundry Controller (CAPI) 0
Cloud Foundry cf-deployment 0 < v60.9.0
Cloud Foundry cf-deployment 0 < v60.9.0

References & Advisories (1)

Bug Bounty Relevance

58 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

0.23%
Raw Score 0.002340
Percentile 14.4%
Date 2026-10-30

Intelligence Sources

mitre ref →
nvd ref →

External Links