6.2
Moyenne
CVE-2026-22721 VMware Aria Operations contains a privilege escalation vulnerability
Description
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 .
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware Aria Operations 8.18 | 8.18.0 → < 8.18.6 | 8.18.6 |
| VMware Cloud Foundation 9.0 | 9.0 → < 9.0.2 | 9.0.2 |
| VMware Cloud Foundation 5.2 | premières → < 5.2.3 | 5.2.3 |
| VMware Cloud Foundation 4.0 | 4.0 → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Platform 5.2 | premières → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Platform 4.0 | 4.0 → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Infrastructure 5.2 | premières → < 5.2.3 | 5.2.3 |
| VMware Telco Cloud Infrastructure 2.0 | 2.0 → < 5.2.3 | 5.2.3 |
Références
- VMSA-2026-0001: VMware Aria Operations updates (includes CVE-2026-22721) support.broadcom.com
- VMware Aria Operations 8.18.6 Release Notes (resolves CVE-2026-22721) techdocs.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de VMware Aria Operations
Les 15 CVE de VMware Aria Operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
Élevée
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
Élevée
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
Élevée
CVE-2026-22720
VMware Aria Operations contains a stored cross-site scripting vulnerability
8.0
Élevée