VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 .
References
Configurations
Configuration 1 (hide)
|
History
04 Mar 2026, 15:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Vmware cloud Foundation
Vmware telco Cloud Platform Vmware telco Cloud Infrastructure Vmware Vmware aria Operations |
|
| CPE | cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:* cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* |
|
| References | () https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 - Patch, Vendor Advisory | |
| References | () https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations/8-18/vmware-aria-operations-8186-release-notes.html - Release Notes |
27 Feb 2026, 14:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
25 Feb 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-25 21:16
Updated : 2026-03-04 15:54
NVD link : CVE-2026-22721
Mitre link : CVE-2026-22721
CVE.ORG link : CVE-2026-22721
JSON object : View
Products Affected
vmware
- aria_operations
- telco_cloud_platform
- cloud_foundation
- telco_cloud_infrastructure
CWE
CWE-269
Improper Privilege Management