high8.0
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or…
Impact
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations | from 8.0 before 8.18.7 |
| Vmware | Cloud Foundation | from 5.0 before 8.18.7 from 9.0 before 9.0.2.0 Version 9.1 |
| Vmware | Telco Cloud Platform | from 5.0 through 5.1 |
| Vmware | Vsphere | from 9.0 before 9.0.2.0 Version 9.1 |