# CVE-2026-22726: Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress…

Source: https://junglewise.ai/threats/cve-2026-22726-route-services-can-be-leveraged-to-send-app-traffic-to-network  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-01  
License: CC BY 4.0 with a link back

CVE-2026-22726 · Severity: medium · CVSS 5 · Published 2026-05-01

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks reachable by the Gorouter, which may not have previously had direct access from outside networks, or from the application.
Routing release: affected from v0.118.0 through v0.371.0 (inclusive); upgrade to v0.372.0 or greater. CF Deployment: affected from v0.0.2 through v54.14.0 (inclusive); upgrade to v55.0.0 or greater (includes routing_release v0.372.0).

Technologies: [Cloudfoundry Cf-Deployment](https://junglewise.ai/threats/technologies/cf-deployment). Vendors: [Cloudfoundry](https://junglewise.ai/threats/vendors/cloudfoundry).

## Quick answers

**Is CVE-2026-22726 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-22726 being exploited in the wild.

**How severe is CVE-2026-22726?** Medium severity, with a CVSS score of 5, published 1 May 2026.

**Which products and versions are affected?** Cloudfoundry Cf-Deployment, Cloudfoundry Routing Release. The advisory does not name versions.

**Is there a fix for CVE-2026-22726?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-22726?** Check whether you run Cloudfoundry Cf-Deployment or Cloudfoundry Routing Release. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Cloudfoundry Cf-Deployment
- Cloudfoundry Routing Release

## Related threats

- [Cloudfoundry UAA has logic error in the token revocation endpoint implementation](https://junglewise.ai/threats/cve-2026-22723-inappropriate-user-token-revocation-due-to-a-logic-error-in-the)