CVE-2026-22719
Sfruttamento noto · CISA KEV
CVSS 8.1 HIGH: vMware Aria Operations contains a command injection vulnerability. EPSS 18% (97º percentile).
Data di correzione federale CISA 24 mar
Vulnerabilità ed exploit · Exploit zero-day
CISA ha aggiunto CVE-2026-22719 al catalogo Known Exploited Vulnerabilities. Si tratta di un command injection in VMware Aria Operations che può consentire l'esecuzione di comandi arbitrari.
3 fonti · 4 mar
Sfruttamento noto · CISA KEV
CVSS 8.1 HIGH: vMware Aria Operations contains a command injection vulnerability. EPSS 18% (97º percentile).
Data di correzione federale CISA 24 mar
CVSS 6.2 MEDIUM: vMware Aria Operations contains a privilege escalation vulnerability. EPSS 0.7% (52º percentile).
CVSS 8 HIGH: vMware Aria Operations contains a stored cross-site scripting vulnerability. EPSS 0.4% (33º percentile).
Dark Reading
VMware Aria Operations Bug Exploited, Cloud Resources at Risk
Exploitation of the command injection flaw in VMware Aria Operations could grant an attacker broad acess to victims' cloud environments.
originaleSecurityWeek
VMware Aria Operations Vulnerability Exploited in the Wild
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
originaleBleepingComputer
CISA flags VMware Aria Operations RCE flaw as exploited in attacks
Cybersecurity and Infrastructure Security Agency (CISA) has added a VMware Aria Operations vulnerability tracked as CVE-2026-22719 to its Known Exploited Vulnerabilities catalog, flagging the flaw as exploited in attacks.
originalePart of the PlainSec briefing for 2026-03-05
Every edition of this story: CVE-2026-22719 Aggiunta al KEV di CISA