CVE-2026-47827: Improper Neutralization of Special Elements used in a Command

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...

CVE-2026-47826: Improper Limitation of a Pathname to a Restricted Directory

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4...