6.2
Medium
CVE-2026-22721 VMware Aria Operations contains a privilege escalation vulnerability
Description
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 .
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations 8.18 | 8.18.0 → < 8.18.6 | 8.18.6 |
| VMware Cloud Foundation 9.0 | 9.0 → < 9.0.2 | 9.0.2 |
| VMware Cloud Foundation 5.2 | earliest → < 5.2.3 | 5.2.3 |
| VMware Cloud Foundation 4.0 | 4.0 → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Platform 5.2 | earliest → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Platform 4.0 | 4.0 → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Infrastructure 5.2 | earliest → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Infrastructure 2.0 | 2.0 → < 5.2.3 | 5.2.3 |
Other CVEs of VMware Aria Operations
The 15 CVEs of VMware Aria Operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-22720
VMware Aria Operations contains a stored cross-site scripting vulnerability
8.0
High