8.2
High
CVE-2025-41229 VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port…
Description
VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Foundation 5 | 5.x → < 5.2.1.2 | 5.2.1.2 |
| Cloud Foundation | 4.5.x | No fix stated |
Other CVEs of Cloud Foundation
The 17 CVEs of Cloud Foundation →
CVE-2026-41709
Broadcom VMWare ESX Insufficient Logging Vulnerability
2.7
Low
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-47876
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor…
9.3
Critical
CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with…
9.8
Critical