Vulnerability Details CVE-2026-22721
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 .
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.7%
CVSS Severity
CVSS v3 Score 6.2
Products affected by CVE-2026-22721
-
cpe:2.3:a:vmware:aria_operations:8.0
-
cpe:2.3:a:vmware:aria_operations:8.10.0
-
cpe:2.3:a:vmware:aria_operations:8.12.0
-
cpe:2.3:a:vmware:aria_operations:8.14.0
-
cpe:2.3:a:vmware:aria_operations:8.14.1
-
cpe:2.3:a:vmware:aria_operations:8.16.0
-
cpe:2.3:a:vmware:aria_operations:8.16.1
-
cpe:2.3:a:vmware:aria_operations:8.17.1
-
cpe:2.3:a:vmware:aria_operations:8.17.2
-
cpe:2.3:a:vmware:aria_operations:8.18
-
cpe:2.3:a:vmware:aria_operations:8.18.1
-
cpe:2.3:a:vmware:aria_operations:8.18.2
-
cpe:2.3:a:vmware:aria_operations:8.18.3
-
cpe:2.3:a:vmware:aria_operations:8.18.4
-
cpe:2.3:a:vmware:aria_operations:8.18.5
-
cpe:2.3:a:vmware:aria_operations:8.6.0
-
cpe:2.3:a:vmware:cloud_foundation:4.0
-
cpe:2.3:a:vmware:cloud_foundation:4.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.2
-
cpe:2.3:a:vmware:cloud_foundation:4.2.1
-
cpe:2.3:a:vmware:cloud_foundation:4.3
-
cpe:2.3:a:vmware:cloud_foundation:4.3.1
-
cpe:2.3:a:vmware:cloud_foundation:4.3.11
-
cpe:2.3:a:vmware:cloud_foundation:4.4
-
cpe:2.3:a:vmware:cloud_foundation:4.4.1
-
cpe:2.3:a:vmware:cloud_foundation:4.4.1.1
-
cpe:2.3:a:vmware:cloud_foundation:4.5
-
cpe:2.3:a:vmware:cloud_foundation:4.5.1
-
cpe:2.3:a:vmware:cloud_foundation:4.5.2
-
cpe:2.3:a:vmware:cloud_foundation:5.0
-
cpe:2.3:a:vmware:cloud_foundation:5.1
-
cpe:2.3:a:vmware:cloud_foundation:5.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.2
-
cpe:2.3:a:vmware:cloud_foundation:9.0
-
cpe:2.3:a:vmware:cloud_foundation:9.0.1.0
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0
-
cpe:2.3:a:vmware:telco_cloud_platform:4.0
-
cpe:2.3:a:vmware:telco_cloud_platform:4.0.1
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0.1