Vmware Telco Cloud Infrastructure vulnerabilities
3 known vulnerabilities affecting vmware/vmware_telco_cloud_infrastructure.
Total CVEs
3
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1HIGH2
Vulnerabilities
Page 1 of 1
CVE-2025-41244P1HIGHCVSS 7.8KEVPoC≥ 3.x, < 8.18.5≥ 2.x, < 8.18.52025-09-29
CVE-2025-41244 [HIGH] CWE-267 CVE-2025-41244: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malici
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
nvd
CVE-2026-22720P3CRITICALCVSS 9.0≥ 2.0, < 5.2.32026-02-25
CVE-2026-22720 [CRITICAL] CWE-79 CVE-2026-22720: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.
To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026
nvd
CVE-2026-22721P3HIGHCVSS 7.2≥ 2.0, < 5.2.32026-02-25
CVE-2026-22721 [HIGH] CWE-269 CVE-2026-22721: VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privile
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMS
nvd