VMware Aria operations vulnerabilities | LiveThreat CVE Feed

Product

VMware Aria operations

by VMware · last CVE Jun 8, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.0

Max CVSS

New 30D

Vulnerabilities15 In the news4 Timeline

Severity mix

Critical 1High 7Medium 7Low 0

Severity

All severities15 Critical1 High7 Medium7 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add VMware Aria operations to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-22719 In wildKEV	8.1	18%	Feb 25	VMware Aria Operations command injection vulnerability Affected: 8.18.x before 8.18.6
CVE-2025-41244 In wildKEV	7.8	9%	Sep 29	VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 8.18.x before 8.18.5
CVE-2026-22720	9.0	0%	Feb 25	VMware Aria Operations stored cross-site scripting vulnerability Affected: 8.18.0 before 8.18.6
CVE-2026-41723	8.0	0%	Jun 8	VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.18.x through 8.18.6; 8.18.x through 8.18.7
CVE-2025-22231	7.8	0%	Apr 1	VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231) Affected: 8.x before 8.18 HF5
CVE-2024-38831	7.8	0%	Nov 26	Local privilege escalation vulnerability (CVE-2024-38831) Affected: 8.x before 8.18.2
CVE-2024-38830	7.8	0%	Nov 26	Local privilege escalation vulnerability Affected: 8.x before 8.18.2
CVE-2026-22721	7.2	1%	Feb 25	VMware Aria Operations privilege escalation vulnerability Affected: 8.18.0 before 8.18.6
CVE-2025-22222	6.5	1%	Jan 30	VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) Affected: 8.x before 8.18.3
CVE-2024-38832	6.4	0%	Nov 26	Stored cross-site scripting vulnerability (CVE-2024-38832) Affected: 8.x before 8.18.2
CVE-2026-41724	5.4	0%	Jun 8	VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.18.x through 8.18.7
CVE-2026-41722	5.4	0%	Jun 8	VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.18.x through 8.18.6; 8.18.x through 8.18.7
CVE-2024-38833	5.4	0%	Nov 26	Stored cross-site scripting vulnerability (CVE-2024-38833) Affected: 8.x before 8.18.2
CVE-2025-41245	4.9	1%	Sep 29	VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 8.18.x before 8.18.5
CVE-2024-38834	4.8	0%	Nov 26	Stored cross-site scripting vulnerability (CVE-2024-38834) Affected: 8.x before 8.18.2