High severity8.0NVD Advisory· Published Feb 25, 2026· Updated Jun 17, 2026
CVE-2026-22720
CVE-2026-22720
Description
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.
To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// .
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*range: >=8.0,<8.18.6
- (no CPE)range: 8.18.0
- (no CPE)
- cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*Range: >=2.2,<=3.0
cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*range: >=4.0,<=5.1
- (no CPE)range: 4.0
- Range: 2.0
- Range: 4.x
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.