CVE-2026-41722
EUVD-2026-3503008.06.2026, 09:16
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vmware | aria_operations | 8.0 ≤ 𝑥 < 8.18.7 |
| vmware | cloud_foundation | 5.0 ≤ 𝑥 < 8.18.7 |
| vmware | cloud_foundation | 9.0 ≤ 𝑥 < 9.0.2.0 |
| vmware | cloud_foundation | 9.1 |
| vmware | telco_cloud_platform | 5.0 ≤ 𝑥 ≤ 5.1 |
| vmware | vsphere | 9.0 ≤ 𝑥 < 9.0.2.0 |
| vmware | vsphere | 9.1 |
𝑥
= Vulnerable software versions