CVE-2026-47840 | CloudFoundry UAA/Cf-deployment LDAP StartTLS certificate host validation

A vulnerability was found in CloudFoundry UAA and Cf-deployment and classified as problematic. Affected by this issue is some unknown functionality of the component LDAP StartTLS Handler. The manipulation results in certificate with host mismatch.

This vulnerability is identified as CVE-2026-47840. The attack can be executed remotely. There is not any exploit available.