What’s Vulnerable › Vulnerabilities
CVE-2026-41722: VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-08 · updated 2026-07-23
- Weakness: CWE-79
Description
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Affected products
- VMware Aria Operations: from 8.0 before 8.18.7 — fixed in 8.18.7
- VMware Cloud Foundation: from 5.0 before 8.18.7; from 9.0 before 9.0.2.0; 9.1 — fixed in 8.18.7, 9.0.2.0
- VMware Telco Cloud Platform: from 5.0 through 5.1
- VMware Vsphere: from 9.0 before 9.0.2.0; 9.1 — fixed in 9.0.2.0
- VMware Aria Operations: from 8.18.x through 8.18.6; from 8.18.x through 8.18.7
- VMware Telco Cloud Platform: from 5.x through 8.18.7
- VMware VCF operations: from 9.1.x.x through 9.1.0.0; from 9.0.x.x through 9.0.2.0 EP2; from 5.x through 8.18.7
How to fix
Upgrade to a fixed version: VMware Aria Operations 8.18.7; VMware Cloud Foundation 8.18.7, 9.0.2.0; VMware Vsphere 9.0.2.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-41722 or the next vulnerability affects your stack