Is CVE-2026-22727 actively exploited?

No active exploitation of CVE-2026-22727 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-22727 be exploited remotely?

Partially. CVE-2026-22727 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-22727?

CVE-2026-22727 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2026-22727

HIGH

CVE-2026-22727

CWE-306Published: March 17, 2026· Updated: Mar 18, 2026

7.5

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:3.4th

Official Description

Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing them to access secure application information.

NVD Source

Technical Analysis

CVE-2026-22727 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.5.