← CVE Intelligence

CVE-2026-41723

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) PUBLISHED

Description (CNA)

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Affected (CNA)

Vendor / productVersions
VMware / VCF operationsaffected 9.1.x.x through 9.1.0.0; affected 9.0.x.x through 9.0.2.0 EP2; affected 5.x through 8.18.7
VMware / VMware Aria Operationsaffected 8.18.x through 8.18.6; affected 8.18.x through 8.18.7
VMware / VMware Telco Cloud Platformaffected 5.x through 8.18.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.