VMware Telco Cloud Platform vulnerabilities

27 CVEs affecting VMware Telco Cloud Platform, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-41709, published 2026-07-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability, published 2026-02-25. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 18.1% chance of exploitation in the next 30 days. VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in…
CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability, published 2025-09-29. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-10-30. EPSS: 8.4% chance of exploitation in the next 30 days. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware…
CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability, published 2025-03-04. Medium severity, CVSS 6.0. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1.8% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be…
CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability, published 2025-03-04. High severity, CVSS 8.2. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1.6% chance of exploitation in the next 30 days. VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual…
CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability, published 2025-03-04. High severity, CVSS 8.2. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 1% chance of exploitation in the next 30 days. VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
CVE-2025-41239, published 2025-07-15. High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days. VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local…
CVE-2025-41236, published 2025-07-15. Critical severity, CVSS 9.3. EPSS: 2.7% chance of exploitation in the next 30 days. VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with…
CVE-2025-41228, published 2025-05-20. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or…
CVE-2026-22721, published 2026-02-25. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative…
CVE-2025-41250, published 2025-09-29. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate…

Latest

CVE-2026-41709, published 2026-07-30. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
CVE-2026-47876, published 2026-07-30. Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days. VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual…
CVE-2026-41703, published 2026-07-30. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to…
CVE-2026-41724, published 2026-06-08. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2026-41723, published 2026-06-08. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2026-41722, published 2026-06-08. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2026-22720, published 2026-02-25. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative…