What’s Vulnerable › Products

VMware Telco Cloud Platform vulnerabilities

27 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 29 published in the last 12 months.

Check whether your VMware Telco Cloud Platform version is affected

Exploited VMware Telco Cloud Platform vulnerabilities

• CVE-2026-59310 — vCenter directory-traversal vulnerability
• CVE-2026-22719 — VMware Aria Operations command injection vulnerability
• CVE-2025-41244 — VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
• CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
• CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability
• CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

Latest VMware Telco Cloud Platform vulnerabilities

• CVE-2026-41709 — ESX insufficient logging vulnerability (CVSS 2.7)
• CVE-2026-47876 — VMXNET3 out-of-bounds write vulnerability (CVSS 9.3)
• CVE-2026-41703 — Out-of-bounds read vulnerability (CVSS 7.6)
• CVE-2026-59309 — vCenter authentication-bypass vulnerability (CVSS 9.8)
• CVE-2026-59310 — vCenter directory-traversal vulnerability (CVSS 9.8) — exploited
• CVE-2026-41724 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 5.4)
• CVE-2026-41723 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 8.0)
• CVE-2026-41722 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) (CVSS 5.4)
• CVE-2026-22721 — VMware Aria Operations privilege escalation vulnerability (CVSS 7.2)
• CVE-2026-22720 — VMware Aria Operations stored cross-site scripting vulnerability (CVSS 9.0)
• CVE-2026-22719 — VMware Aria Operations command injection vulnerability (CVSS 8.1) — exploited
• CVE-2025-41250 — Header injection vulnerability (CVSS 8.5)
• CVE-2025-41244 — VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) (CVSS 7.8) — exploited
• CVE-2025-41241 — Denial-of-service vulnerability (CVSS 4.4)
• CVE-2025-41239 — vSockets information-disclosure vulnerability (CVSS 7.1)
• CVE-2025-41238 — PVSCSI heap-overflow vulnerability (CVSS 9.3)
• CVE-2025-41237 — VMCI integer-underflow vulnerability (CVSS 9.3)
• CVE-2025-41236 — VMXNET3 integer-overflow vulnerability (CVSS 9.3)
• CVE-2025-22245 — (CVSS 5.9)
• CVE-2025-22244 — (CVSS 6.9)
• CVE-2025-22243 — (CVSS 7.5)
• CVE-2025-41228 — VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 4.3)
• CVE-2025-41227 — Denial-of-Service Vulnerability (CVSS 5.5)
• CVE-2025-41226 — Guest Operations Denial-of-Service Vulnerability (CVSS 6.8)
• CVE-2025-41225 — VMware vCenter Server authenticated command-execution vulnerability (CVSS 8.8)