TC
Product
Telco Cloud Platform
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 12Medium 9Low 1
Watch
Add Telco Cloud Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59310 RansomwareIn wildKEV | 9.8 | Jul 30 | vCenter directory-traversal vulnerability Affected: 5.1.x; 5.0.x; 4.x; 3.0 |
| CVE-2025-22225 RansomwareIn wildKEV | 8.2 | Mar 4 | VMware ESXi Arbitrary Write Vulnerability Affected: 2.0; 2.5; 2.7; 3.0; 4.0; 4.0.1; +1 more |
| CVE-2025-22224 In wildKEV | 8.2 | Mar 4 | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2026-22719 In wildKEV | 8.1 | Feb 25 | VMware Aria Operations command injection vulnerability Affected: 2.0 before 5.2.3 |
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 4.0 before 5.0.1 |
| CVE-2025-22226 In wildKEV | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Affected: 2.0; 2.5; 2.7; 3.0; 4.0; 4.0.1; +1 more |
| CVE-2026-41709 In wildKEV | 2.7 | Jul 30 | ESX insufficient logging vulnerability Affected: 5.1.x; 5.0.x |
| CVE-2026-59309 | 9.8 | Jul 30 | vCenter authentication-bypass vulnerability Affected: 5.1.x; 5.0.x; 4.x; 3.0 |
| CVE-2026-47876 | 9.3 | Jul 30 | VMXNET3 out-of-bounds write vulnerability Affected: 5.1.x; 5.0.x |
| CVE-2025-41238 | 9.3 | Jul 15 | PVSCSI heap-overflow vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-41237 | 9.3 | Jul 15 | VMCI integer-underflow vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-41236 | 9.3 | Jul 15 | VMXNET3 integer-overflow vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2026-22720 | 9.0 | Feb 25 | VMware Aria Operations stored cross-site scripting vulnerability Affected: 4.0 through 5.1 |
| CVE-2025-41225 | 8.8 | May 20 | VMware vCenter Server authenticated command-execution vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-41250 | 8.5 | Sep 29 | Header injection vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-22249 | 8.2 | May 13 | VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) Affected: 5.0 through 5.0.1 |
| CVE-2026-41723 | 8.0 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 5.0 through 5.1 |
| CVE-2026-41703 | 7.6 | Jul 30 | Out-of-bounds read vulnerability Affected: 5.1.x; 5.0.x |
| CVE-2025-22243 | 7.5 | Jun 4 | VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation Affected: 3.0 through 5.0 |
| CVE-2026-22721 | 7.2 | Feb 25 | VMware Aria Operations privilege escalation vulnerability Affected: 4.0 through 5.1 |
| CVE-2025-41239 | 7.1 | Jul 15 | vSockets information-disclosure vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-22244 | 6.9 | Jun 4 | VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation Affected: 3.0 through 5.0 |
| CVE-2025-41226 | 6.8 | May 20 | Guest Operations Denial-of-Service Vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2025-22245 | 5.9 | Jun 4 | VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation Affected: 3.0 through 5.0 |
| CVE-2025-41227 | 5.5 | May 20 | Denial-of-Service Vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
| CVE-2026-41724 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 5.0 before 8.18.7 |
| CVE-2026-41722 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 5.0 through 5.1 |
| CVE-2025-41241 | 4.4 | Jul 29 | Denial-of-service vulnerability Affected: 5.x, 2.x |
| CVE-2025-41228 | 4.3 | May 20 | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability Affected: 5.x, 4.x, 3.x, 2.x |
Showing 29