CVE-2026-41013

Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF space developer to inject arbitrary kernel CIFS mount options via bypassing the mount-option allowlist, enabling privilege escalation and security control bypass on multi-tenant...

EUVD-2018-11890

Malware in sbrugna...

EUVD-2016-4151

Malware in sbrugna...

Cloud Foundry Diego Privilege Gain Vulnerability

Cloud Foundry Diego is a container management system used in the Cloud Foundry cloud computing platform from the Cloud Foundry Foundation in the United States. A security vulnerability exists in Cloud Foundry Diego versions prior to 2.8.0, which stems from the program's failure to properly filter...

CVE-2018-1265

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego...

CVE-2018-1265: Unrestricted Upload of File with Dangerous Type

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego...

PT-2018-11306

Name of the Vulnerable Software and Affected Versions Cloud Foundry Diego versions prior to 2.8.0 Description The issue is related to the improper sanitization of file paths in tar and zip files headers. A remote attacker with CF admin privileges can exploit this by uploading a malicious buildpac...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091: Undefined Security Weakness

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

PT-2017-8330

Name of the Vulnerable Software and Affected Versions Cloud Foundry Diego versions 0.1468.0 through 0.1470.0 Description The issue allows remote attackers to cause a denial of service. Recommendations For Cloud Foundry Diego versions 0.1468.0 through 0.1470.0, update to a version outside of the...