CVE-2026-41724 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026…

CVE-2026-41724

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) PUBLISHED

Description (CNA)

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Affected (CNA)

Vendor / product	Versions
VMware / VCF operations	affected 5.x through 8.18.7
VMware / VMware Aria Operations	affected 8.18.x through 8.18.7
VMware / VMware Telco Cloud Platform	affected 5.x through 8.18.7

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.