← Database

CVE-2026-41723

HIGH CVSS: 8.0 Published: 2026-06-08 Modified: 2026-07-23

Description

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Affected Platforms

Vmware Aria OperationsVmware VsphereVmware Telco Cloud PlatformVmware Cloud Foundation

Weakness Type

CWE-79

References