VMware Aria Operations contains a privilege escalation vulnerability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 25, 2026 · NIST NVD

   Detected

   VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ec

2. Jun 17, 2026 · NIST NVD

   Updated

   VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001 https://support.broadcom.com/web/ec

Affected

• cpe vmware/aria operationsversion unspecified
• cpe vmware/cloud foundationversion unspecified
• cpe vmware/telco cloud infrastructureversion unspecified
• cpe vmware/telco cloud platformversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2026-22721

  VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches l

  nvd.nist.gov

References

• Patch · support.broadcom.com
• Release Notes · techdocs.broadcom.com