CVE-2025-41245Disclosure

LOWCVSS 4.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149

Weakness type (CWE)

CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 5 classified signals
Peaked 1d ago at 4 mentions (2026-03-18); latest day: 1
5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-18	4	Disclosure4
2026-03-19	1	Disclosure1

Full discourse5 posts

Enno Rey@Enno_Insinuator204d
Disclosure
Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721), via @Insinuator https://insinuator.net/2026/03/vulnerabilities-in-broadcom-vmware-aria-operations-privilege-escalation-cve-2025-41245-cve-2026-22721/
Post summary
The article announces two privilege‑escalation vulnerabilities in Broadcom VMware Aria Operations, identified as CVE‑2025‑41245 and CVE‑2026‑22721, referencing a blog post by Insinuator.
070952.3K
7.4K followersView on X
Nicolas Krassas@Dinosn204d
Disclosure
Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721) https://insinuator.net/2026/03/vulnerabilities-in-broadcom-vmware-aria-operations-privilege-escalation-cve-2025-41245-cve-2026-22721/
Post summary
The article announces privilege escalation vulnerabilities (CVE-2025-41245 and CVE-2026-22721) affecting Broadcom VMware Aria Operations without providing PoC, exploit, patch, or active exploitation details.
060831.4K
153.3K followersView on X
Lucas@lucasverdan204d
Disclosure
🛑 VMware Aria Operations flaws enable credential theft and privilege esca… CVE-2025-41245 and CVE-2026-22721 let low-privileged users escalate and extract credentials… 🔗 Details → https://invaders.ie/resources/blog/vulnerability/vmware-aria-operations-flaws-enable-credential-theft-and-privilege-escalation
Post summary
The tweet discloses that CVE‑2025‑41245 and CVE‑2026‑22721 allow credential theft and privilege escalation in VMware Aria Operations, but offers no PoC, exploit code, or patch details.
0000083
309 followersView on X
DPR Recovery@GoldenPhone204d
Disclosure
@ciberseguridad Vulnerabilidades en Broadcom VMware Aria Operations: Escalada de privilegios (CVE-2025-41245 / CVE-2026-22721) https://insinuator.net/2026/03/vulnerabilities-in-broadcom-vmware-aria-operations-privilege-escalation-cve-2025-41245-cve-2026-22721/
Post summary
The tweet provides a link to an article announcing privilege‑escalation vulnerabilities (CVE‑2025‑41245 / CVE‑2026‑22721) in Broadcom VMware Aria Operations, without revealing PoC, exploit tools, active exploitation, or patches.
0000095
52 followersView on X
Vivek | Cybersecurity@VivekIntel204d
Disclosure
VMware Aria Ops flaws (CVE-2025-41245 / CVE-2026-22721) allow privilege escalation from vCenter user → full admin, enabling credential theft (vCenter, VIDM, VCD) and takeover of connected environments; patch available, disable vCenter login if exposed https://insinuator.net/2026/03/vulnerabilities-in-broadcom-vmware-aria-operations-privilege-escalation-cve-2025-41245-cve-2026-22721/
Post summary
The post announces two CVEs (CVE‑2025‑41245 and CVE‑2026‑22721) that allow privilege escalation and credential theft in VMware Aria Ops, and states that a patch is available and recommends disabling vCenter login as a mitigation.
00000118
295 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2025-41245

Nicolas Krassas[verified]@DinosnDisclosure

The article announces privilege escalation vulnerabilities (CVE-2025-41245 and CVE-2026-22721) affecting Broadcom VMware Aria Operations without providing PoC, exploit, patch, or active exploitation details.

Lucas[verified]@lucasverdanDisclosure

The tweet discloses that CVE‑2025‑41245 and CVE‑2026‑22721 allow credential theft and privilege escalation in VMware Aria Operations, but offers no PoC, exploit code, or patch details.

Vivek | Cybersecurity[verified]@VivekIntelDisclosure

The post announces two CVEs (CVE‑2025‑41245 and CVE‑2026‑22721) that allow privilege escalation and credential theft in VMware Aria Ops, and states that a patch is available and recommends disabling vCenter login as a mitigation.

Enno Rey@Enno_InsinuatorDisclosure

The article announces two privilege‑escalation vulnerabilities in Broadcom VMware Aria Operations, identified as CVE‑2025‑41245 and CVE‑2026‑22721, referencing a blog post by Insinuator.

DPR Recovery@GoldenPhoneDisclosure

The tweet provides a link to an article announcing privilege‑escalation vulnerabilities (CVE‑2025‑41245 / CVE‑2026‑22721) in Broadcom VMware Aria Operations, without revealing PoC, exploit tools, active exploitation, or patches.