AO
Product
Aria Operations
On CISA KEVExploited in the wild
16
CVEs
2
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 9Low 0
Watch
Add Aria Operations to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22719 In wildKEV | 8.1 | Feb 25 | VMware Aria Operations command injection vulnerability Affected: 8.0 before 8.18.6 |
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 8.0 before 8.18.5 |
| CVE-2026-41723 | 8.0 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2024-38831 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the… Affected: 8.0 before 8.18.2 |
| CVE-2024-38830 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate… Affected: 8.0 before 8.18.2 |
| CVE-2026-22721 | 7.2 | Feb 25 | VMware Aria Operations privilege escalation vulnerability Affected: 8.0 before 8.18.6 |
Showing 6
