← CVE Radar
CVE-2026-47831Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks
Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.
7.7 HIGHEPSS 0.31%Not in KEVNVD: Awaiting Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.7 | HIGH | 4.0vmware (CNA) | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.5 | HIGH | 3.0vmware (CNA) | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-47831
- Status
- Awaiting Analysis
- Assigner (CNA)
- vmware
- Published
- Jul 9, 2026
- Last modified
- 2026-10-25 17:10 UTC
Affected Products
As published by the CNA in the CVE record.
Cloud Foundry Foundationbosh-windows-stemcell-builder1 version range
- before 2019.98