Vulnerabilities

TI-2026-18248 CVE-2026-22721 · GHSA-p743-h3f6-5f74

VMware Aria Operations privilege escalation vulnerability

LOW 35

VMware Aria Operations contains a privilege escalation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00739 Published 2026-02-25 Fixed in 8.18.6, 5.2.3 +1 CWE-269

TI-2026-18247 CVE-2026-22720 · GHSA-rr3q-q2xp-f894

MEDIUM 41

VMware Aria Operations contains a stored cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00447 Published 2026-02-25 Fixed in 8.18.6, 5.2.3 +2 CWE-79

TI-2026-18246 CVE-2026-22719 · GHSA-2hp7-6cr6-jvxh

CRITICAL 94KEV

VMware Aria Operations contains a command injection vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.18321 Published 2026-02-25 Fixed in 8.18.6, 9.0.2 +1 CWE-77