Cloudanix VulnDB

CVE-2026-22723

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Mar 5, 2026

CISA due date

—

The record

Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.

Affected packages

Ecosystem Package Introduced Fixed