Vulnerability record/PUBLISHED/Published Nov 12, 2026 07:55:25 UTC

CVE-2026-47832

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)

Base score7.3/ 10

SeverityHighCVSS 4.0

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorNetworkAV

Attack complexityLowAC

Attack requirementsPresentAT

Privileges requiredLowPR

User interactionNoneUI

Vulnerable system confidentialityHighVC

Vulnerable system integrityNoneVI

Vulnerable system availabilityNoneVA

Subsequent system confidentialityHighSC

Subsequent system integrityHighSI

Subsequent system availabilityHighSA

CVSS vector stringCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityvmware

Last updatedNov 12, 2026 07:55:25 UTC

PublishedNov 12, 2026 07:55:25 UTC

ReservedMay 20, 2026 10:00:48 UTC