CVE-2026-22719
Known exploited · CISA KEV
CVSS 8.1 HIGH: vMware Aria Operations contains a command injection vulnerability. EPSS 18% (97th percentile).
CISA federal remediation date Mar 24
Vulnerabilities · 240 days ago
CISA added CVE-2026-22719—a command injection in VMware Aria Operations—to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Broadcom released patches and a temporary workaround; federal civilian agencies must remediate by March 24, 2026.
Known exploited · CISA KEV
CVSS 8.1 HIGH: vMware Aria Operations contains a command injection vulnerability. EPSS 18% (97th percentile).
CISA federal remediation date Mar 24
CVSS 6.2 MEDIUM: vMware Aria Operations contains a privilege escalation vulnerability. EPSS 0.7% (54th percentile).
CVSS 8 HIGH: vMware Aria Operations contains a stored cross-site scripting vulnerability. EPSS 0.4% (38th percentile).
3 sources covering this story
VMware Aria Operations Bug Exploited, Cloud Resources at Risk
Exploitation of the command injection flaw in VMware Aria Operations could grant an attacker broad acess to victims' cloud environments.
VMware Aria Operations Vulnerability Exploited in the Wild
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
CISA flags VMware Aria Operations RCE flaw as exploited in attacks
Cybersecurity and Infrastructure Security Agency (CISA) has added a VMware Aria Operations vulnerability tracked as CVE-2026-22719 to its Known Exploited Vulnerabilities catalog, flagging the flaw as exploited in attacks.
Part of the PlainSec briefing for 2026-03-05