PT-2026-21686 · Vmware · Vmware Aria Operations

Published 2026-02-24 · Updated 2026-03-19 · CVE-2026-22721

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Aria Operations (affected versions not specified)

Description A malicious actor with privileges in vCenter to access VMware Aria Operations may leverage a privilege escalation issue to obtain administrative access in VMware Aria Operations. To remediate this issue, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001.

Recommendations Apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found in VMSA-2026-0001.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2026-02325

CVE-2026-22721

Affected Products

Vmware Aria Operations

References · 21

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02325 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22721 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22721 · Security Note
• https://twitter.com/ThreatSynop/status/2026321482796638254 · Twitter Post
• https://twitter.com/lucasverdan/status/2034450793508811065 · Twitter Post
• https://twitter.com/autumn_good_35/status/2026213607177179158 · Twitter Post
• https://twitter.com/xkzdb/status/2029072224431317031 · Twitter Post
• https://t.me/CVEtracker/45756 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1rkpf0g/cisa_flags_dangerous_vmware_flaw_cve202622719 · Reddit Post
• https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations/8-18/vmware-aria-operations-8186-release-notes.html · Note
• https://twitter.com/CCBalert/status/2026680789111366089 · Twitter Post
• https://twitter.com/xkzdb/status/2028979090699538664 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1rdlull/vmware_aria_vulnerabilities_allow_remote_code · Reddit Post
• https://twitter.com/CVEnew/status/2027099287470166165 · Twitter Post