ZeroDay Findings
Sign inSign up

Findings

CVE-2026-22719

Broadcom VMware Aria Operations Command Injection Vulnerability

Published Feb 25, 2026 · updated Jun 17, 2026 · Broadcom VMware Aria Operations

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001 Workarounds for CVE-2026-22719 are documented in the 'Workarounds' column of the ' Response Matrix https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ' in VMSA-2026-0001

Timeline

Detection, updates, and resolution for this record.

  1. Feb 25, 2026 · Catalog

    Detected

    VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://suppor

  2. Mar 3, 2026 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Mar 24, 2026 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://suppor

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Mar 24, 2026

Affected

  • cpe vmware/aria operationsversion unspecified
  • cpe vmware/cloud foundationversion unspecified
  • cpe vmware/telco cloud infrastructureversion unspecified
  • cpe vmware/telco cloud platformversion unspecified
  • vendor Broadcom VMware Aria Operationsversion unspecified

Sources

  • CISA KEVCVE-2026-22719

    Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.

    cisa.gov
  • CVE.orgCVE-2026-22719

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-22719

    30-day exploitation probability 17.7%

    first.org
  • NIST NVDCVE-2026-22719

    VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. T

    nvd.nist.gov

References