Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2026-41722

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VCF operations

Default version status: affected

  • 9.1.x.x to ≤ 9.1.0.0affected
  • 9.0.x.x to ≤ 9.0.2.0 EP2affected
  • 5.x to ≤ 8.18.7affected

VMware VMware Aria Operations

Default version status: affected

  • 8.18.x to ≤ 8.18.6affected
  • 8.18.x to ≤ 8.18.7affected

VMware VMware Telco Cloud Platform

Default version status: affected

  • 5.x to ≤ 8.18.7affected

References