CVE-2026-59357 | Cloud Foundry UAA up to 4.5.0/79.6.0 OIDC Login Callback id_token data authenticity

October 6, 2026 Yanac

A vulnerability labeled as critical has been found in Cloud Foundry UAA up to 4.5.0/79.6.0. Affected by this issue is some unknown functionality of the component OIDC Login Callback. Executing a manipulation of the argument id_token can lead to insufficient verification of data authenticity.

This vulnerability is registered as CVE-2026-59357. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More