AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2016-8218

CRITICAL · CVSS 9.8 EPSS 1.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2016-8218
Severity
CRITICAL
CVSS
9.8
EPSS
1.30%

Original Filing — NVD Description

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.