Login Request a demo
TC
Product
Telco Cloud Infrastructure
by VMware · last CVE Jul 30, 2026
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news12Timeline
Severity mix
Critical 6High 9Medium 7Low 0
Severity
All severities22Critical6High9Medium7Low0
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Telco Cloud Infrastructure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59310
RansomwareIn wildKEV
9.8
3%
Jul 30
vCenter directory-traversal vulnerability
Affected: 3.0
CVE-2025-22225
RansomwareIn wildKEV
8.2
1%
Mar 4
VMware ESXi Arbitrary Write Vulnerability
Affected: 2.2; 2.5; 2.7; 3.0
CVE-2025-22224
In wildKEV
8.2
2%
Mar 4
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
Affected: 3.x, 2.x
CVE-2026-22719
In wildKEV
8.1
18%
Feb 25
VMware Aria Operations command injection vulnerability
Affected: 2.0 before 5.2.3
CVE-2025-41244
In wildKEV
7.8
9%
Sep 29
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
Affected: 2.2 through 3.0
CVE-2025-22226
In wildKEV
6.0
2%
Mar 4
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
Affected: 2.2; 2.5; 2.7; 3.0
CVE-2026-59309
9.8
1%
Jul 30
vCenter authentication-bypass vulnerability
Affected: 3.0
CVE-2025-41238
9.3
0%
Jul 15
PVSCSI heap-overflow vulnerability
Affected: 3.x, 2.x
CVE-2025-41237
9.3
0%
Jul 15
VMCI integer-underflow vulnerability
Affected: 3.x, 2.x
CVE-2025-41236
9.3
3%
Jul 15
VMXNET3 integer-overflow vulnerability
Affected: 3.x, 2.x
CVE-2026-22720
9.0
0%
Feb 25
VMware Aria Operations stored cross-site scripting vulnerability
Affected: 2.2 through 3.0
CVE-2025-41225
8.8
0%
May 20
VMware vCenter Server authenticated command-execution vulnerability
Affected: 3.x, 2.x
CVE-2025-41250
8.5
1%
Sep 29
Header injection vulnerability
Affected: 3.x, 2.x
CVE-2025-22243
7.5
0%
Jun 4
VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation
Affected: 2.2 through 3.0
CVE-2026-22721
7.2
1%
Feb 25
VMware Aria Operations privilege escalation vulnerability
Affected: 2.2 through 3.0
CVE-2025-41239
7.1
3%
Jul 15
vSockets information-disclosure vulnerability
Affected: 3.x, 2.x
CVE-2025-22244
6.9
0%
Jun 4
VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation
Affected: 2.2 through 3.0
CVE-2025-41226
6.8
0%
May 20
Guest Operations Denial-of-Service Vulnerability
Affected: 3.x, 2.x
CVE-2025-22245
5.9
0%
Jun 4
VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation
Affected: 2.2 through 3.0
CVE-2025-41227
5.5
0%
May 20
Denial-of-Service Vulnerability
Affected: 3.x, 2.x
CVE-2025-41241
4.4
0%
Jul 29
Denial-of-service vulnerability
Affected: 2.x
CVE-2025-41228
4.3
1%
May 20
VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
Affected: 3.x,2.x
Showing 22