CVE-2023-20887Disclosure(vmware / aria_operations_for_networks)

LOWCVSS 9.8 · CRITICALCISA KEV

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Prioritize remediation for vmware aria_operations_for_networks systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

3.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-07-13. Apply updates per vendor instructions.

Weakness type (CWE)
CWE-77

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aria_operations_for_networks

Threat summary

  • Public PoC and exploit tooling are both present
  • 3 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
aria_operations_for_networks

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-08-27: 3PoC Mentioned / Linked · 2026-08-27: 2Exploit Tool / Code · 2026-08-27: 108-27
Signal classification3 categories
Disclosure
133.3%
Exploit
133.3%
PoC
133.3%
Referenced assets2 URLs
Full discourse3 posts
  • ExploitGrid@exploitgrid
    Exploit

    [EXPLOIT] EGE-GH-sF1o608 [CRITICAL/PoC] Linked: CVE-2023-20887 CVE-2023-20887 🔗 https://exploitgrid.net/exploits/a0be42ee-cbef-4b56-8ae8-6923b15004ba

    Post summary

    A PoC and functional exploit for CVE-2023-20887 are provided via an ExploitGrid link.

    1000026
    38 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [EXPLOIT] EGE-GH-JZlUcTa [CRITICAL/PoC] Linked: CVE-2023-20887 CVE-2023-20887 🔗 https://exploitgrid.net/exploits/4ae27d7b-5a6f-401b-bfcd-e9ff15582477

    Post summary

    The post announces a critical CVE with a PoC, linking to an ExploitGrid entry, but offers no detailed technical description or exploitation status.

    1000026
    38 followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    🛡️ ExploitGrid Daily Threat Digest Critical Exploits disclosed today: CVE-2026-39440 CVE-2026-24118 CVE-2023-20887 CVE-2023-20887 CVE-2023-20887 ..🧵👇

    Post summary

    The tweet simply lists several CVEs as newly disclosed critical exploits without any additional details on proof‑of‑concepts, active exploitation, patches, or technical specifics.

    1000040
    38 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appvmwarearia_operations_for_networks---

Explore more