CVE-2022-22945: VMware Cloud Foundation

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root.

Affected products

• VMware Cloud Foundation: from 3.0, up to and including 3.11
• VMware Nsx Data Center: before 6.4.13 (fixed in 6.4.13)

Published 2022-02-16. Last modified 2026-06-17.