8.0
High
CVE-2026-41722 VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
Description
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VCF operations 9.1 | 9.1.x.x → 9.1.0.0 | No fix stated |
| VCF operations 9.0 | 9.0.x.x → latest | No fix stated |
| VCF operations 5 | 5.x → 8.18.7 | No fix stated |
| VMware Aria Operations 8.18 | 8.18.x → 8.18.7 | No fix stated |
| VMware Telco Cloud Platform 5 | 5.x → 8.18.7 | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VCF operations
The 4 CVEs of VCF operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2025-41244
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
7.8
High