CVE-2026-47831

CVSS Score & Metrics

Base Score

7.5 / 10

Vector String

                                        CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22.
Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.

Vulnerability Details

Published Date

July 09, 2026

Last Modified

July 09, 2026

Source

NVD

Vendor

Cloud Foundry Foundation

Product

bosh-windows-stemcell-builder

External References

https://www.cloudfoundry.org/blog/cve-2026-47831-cryptographically-weak-password-generation-in-bosh-windows-stemcell-builder-allows-remote-ssh-brute-force-attacks/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment