CVE-2022-38650: VMware Hyperic Server

Critical severity, CVSS 10.0. EPSS: 0.9% chance of exploitation in the next 30 days.

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server process. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• VMware Hyperic Server: version 5.8.6 only

Published 2022-11-12. Last modified 2026-06-17.