AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VMwareCVE-2026-47827

VMware BOSH CLI: command injection

VMware

CVE-2026-47827 · Published Aug 21, 2026 · updated Aug 28, 2026

High7.5
Fix: upgrade to 2.840.0 or later
VMware advisory

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

Affected versions

PackageAffectedFixed in
BOSH CLI
Product
>= 0.0, < 2.840.02.840.0
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-77

More VMware advisories

All VMware
Medium 5.9Aug 24VMware Micrometer: denial of serviceCVE-2026-59295no fix yetHigh 7.5Aug 21VMware Spring AI: denial of serviceCVE-2026-59279no fix yetMedium 4.2Aug 21VMware Spring AI: resource exposureCVE-2026-59308no fix yetMedium 6.5Aug 21VMware Spring AI: privilege escalationCVE-2026-59318no fix yetMedium 5.9Aug 21VMware Micrometer: injectionCVE-2026-59296no fix yetMedium 5.3Aug 21VMware Micrometer Tracing: denial of serviceCVE-2026-59323no fix yet