CVE-2021-22057: VMware Workspace One Access

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.

Affected products

• VMware Workspace One Access: version 20.10 only; version 20.10.0.1 only; version 21.08 only; version 21.08.0.1 only

Published 2021-12-20. Last modified 2026-06-17.