https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:23:32.596019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09482 bdu:2024-09482 2026-10-03T06:23:32.656946+00:00 bdu:2024-09482 https://cve.radiocsirt.org/vuln/euvd-2026-5806 EUVD-2026-5806 2026-10-03T06:23:32.656987+00:00 EUVD-2026-5806 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37082 fkie_cve-2024-37082 2026-10-03T06:23:32.657003+00:00

When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications.

You are affected if you have route-services enabled in routing-release and have configured the haproxy-boshrelease property “ha_proxy.forwarded_client_cert” to “forward_only_if_route_service”.

 https://cve.radiocsirt.org/vuln/ghsa-w3h5-p6v5-5vjm GHSA-w3h5-p6v5-5vjm 2026-10-03T06:23:32.657043+00:00

Security check loophole in HAProxy release (in combination with routing release) in Cloud Foundry prior to v40.17.0 potentially allows bypass of mTLS authentication to applications hosted on Cloud Foundry.