CVE-2026-41724
EUVD-2026-3503208.06.2026, 09:16
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vmware | aria_operations | 8.0 ≤ 𝑥 < 8.18.7 |
| vmware | cloud_foundation | 5.0 ≤ 𝑥 < 8.18.7 |
| vmware | telco_cloud_platform | 5.0 ≤ 𝑥 < 8.18.7 |
𝑥
= Vulnerable software versions