IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-01 19:16

MODIFIED

2026-06-01 19:16

EPSS (Prob. Exploit)

0.42%

Top 65.1%

DATA SOURCES:

NVD 🔗 2026-06-01 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF space developer to inject arbitrary kernel CIFS mount options via bypassing the mount-option allowlist, enabling privilege escalation and security control bypass on multi-tenant Diego cells. Affected versions: smb-volume-release: All versions prior to v3.60.0 CF Deployment: All versions prior to v56.0.0

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-88

> CWE DETAILED DESCRIPTIONS

CWE-88: Improper Neutralization of Argument Delimiters in a Command - The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

> HISTORIQUE DES MODIFICATIONS

Première apparition

01/06/2026 19:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') - The product constructs a string for a command to be executed by a separate component in another control sph...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE