CVE-2026-22734
Cloud Foundry UAA SAML 2.0 Signature Bypass
CVSS Score
8.6
EPSS Score
0.0%
EPSS Percentile
0th
Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions are enabled for a client, as the UAA accepts SAML 2.0 bearer assertions that are neither signed nor encrypted. This issue affects UUA from v77.30.0 to v78.7.0 (inclusive) and it affects CF Deployment from v48.7.0 to v54.14.0 (inclusive).
| CWE | CWE-290 |
| Vendor | cloud foundry |
| Product | uua |
| Published | Apr 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for cloud foundry uua
Be the first to know when new high vulnerabilities affecting cloud foundry uua are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Cloud Foundry / UUA
v77.21.0 ≤ v78.8.0