Security Advisory
CVE-2026-47831
7.5
HIGH
Vulnerability Description
Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22.
Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.
Published Date
July 9, 2026
Official Source
NIST NVD Advisory