Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
| Date | Total | Labels |
|---|
| 2026-06-08 | 7 | Disclosure5Patch2 |
| 2026-06-10 | 1 | Disclosure1 |
| 2026-06-15 | 1 | Disclosure1 |
VMware Cloud Foundationに複数の蓄積型クロスサイトスクリプティングの脆弱性。CVE-2026-41722, CVE-2026-41723, CVE-2026-41724。修正版が提供されている。 https://cybersecuritynews.com/vmware-stored-xss-vulnerabilities/
Post summary
The post reports stored XSS vulnerabilities in VMware Cloud Foundation and confirms that patches are available, with no evidence of exploitation or PoC.
【VMware VCF / Aria Operationsにstored XSS、管理操作の悪用に注意】 VMware Cloud Foundation Operationsおよび関連製品に、stored XSS脆弱性が公開されました。 対象はCVE-2026-41722、CVE-2026-41723、CVE-2026-41724で、CVSSは8.0とされています。 攻撃者がpolicy、view、text-widgetを作成できる権限を持つ場合、スクリプトを注入し、管理者が閲覧したタイミングで管理操作を実行させる可能性があります。 運用基盤の管理画面で発生するXSSは、権限昇格や設定変更につながるため軽視できません。 防御側は修正版適用、管理画面の作成権限見直し、不審なwidgetやpolicyの監査を行ってください。 #CyberSecurity #VMware #VCF #XSS #CVE #CloudSecurity #SOC https://cybersecuritynews.com/vmware-stored-xss-vulnerabilities/
Post summary
VMware Cloud Foundation and Aria Operations have stored XSS vulnerabilities (CVE-2026-41722, 41723, 41724) rated CVSS 8.0, potentially enabling privilege escalation; patching and permission review are recommended.
Warning: 3 high cross-site scripting #XSS in #VMware Cloud Foundation Operations #CVE-2026-41722 #CVE-2026-41723 #CVE-2026-41724 CVSS: 8.0 A remote attacker with low privileges can exploit them to perform admin actions. #Patch #Patch #Patch
Post summary
The tweet warns about three high‑severity XSS vulnerabilities (CVE‑2026‑41722, CVE‑2026‑41723, CVE‑2026‑41724) in VMware Cloud Foundation Operations, notes CVSS 8.0 and remote exploit potential for admin actions, and urges patching.
VMware VCF Operations の脆弱性 CVE-2026-41722／41723／41724 が FIX：深刻な蓄積型 XSS https://iototsecnews.jp/2026/06/08/multiple-vmware-stored-xss-flaw-enable-attackers-to-inject-malicious-scripts/ VMware に存在する、脆弱性 CVE-2026-41722／CVE-2026-41723／CVE-2026-41724 が公表されました。この問題の原因は、管理画面からユーザーが入力したデータの検証や、出力する際のエンコード処理が不適切だったことにあります。これにより、悪意のプログラムがシステム内に保存されてしまい、他の利用者がアクセスした際に自動的に実行されてしまいます。ご利用のチームは、ご注意ください。 #CVE202641722 #CVE202641723 #VMware #VMwareVCFOperations
Post summary
Three CVEs (CVE‑2026‑41722/41723/41724) affecting VMware VCF Operations have been disclosed as stored XSS flaws. The post notes a fix is available but does not provide patch details, PoC, or evidence of active exploitation.
先日の 9.1 EP1 対応のものかと思ったら 9.1 含めたリリース済みのパッチで対応してたパターンか👀 VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513?utm_campaign=VCF_FY26_VCF_VMSA-2026-0004_MKT_CM_5976&utm_content=VCF_FY26_VCF_VMSA-2026-0004_5976_SecurityAlert_MKT_TRANS_EM_11409&utm_medium=email&utm_source=eloqua
Post summary
The post references VMware’s release of a patch (VMSA-2026-0004) that addresses CVE‑2026‑41722, CVE‑2026‑41723, and CVE‑2026‑41724, with no mention of a PoC, exploit code, active exploitation, or false positive claim.
VMware Cloud Foundation Operationsに保存型XSSが可能な脆弱性(CVE-2026-41722、CVE-2026-41723、CVE-2026-41724) https://rocket-boys.co.jp/security-measures-lab/vmware-cloud-foundation-operations-stored-xss/ #セキュリティ対策Lab #security #securitynews
Post summary
The tweet announces three VMware Cloud Foundation Operations CVEs that enable stored XSS, linking to a security lab article that presumably contains further technical details.
Broadcom disclosed three stored XSS vulnerabilities in VMware Cloud Foundation Operations and related products, CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724, rated CVSS 8.0 and enabling authenticated script injection, in advisory VMSA-2026-0004. https://threatcluster.io/cluster/vmware-cloud-foundation-operations-faces-multiple-stored-xss-0f130b09
Post summary
Broadcom announced three stored XSS vulnerabilities (CVE‑2026‑41722, CVE‑2026‑41723, CVE‑2026‑41724) in VMware Cloud Foundation Operations with a CVSS score of 8.0, but no PoC, exploit, or remediation details are provided.
CVE-2026-41723 VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-w… https://www.cve.org/CVERecord?id=CVE-2026-41723
Post summary
CVE-2026-41723 is a disclosed stored XSS vulnerability in VMware Cloud Foundation Operations, requiring privileges to create policies or views, but no PoC, exploit code, active exploitation, or patch information is provided.
CVE-2026-41723 Stored Cross-Site Scripting in VMware Cloud Foundation Operations https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41723
Post summary
The text announces CVE-2026-41723, a stored Cross‑Site Scripting issue in VMware Cloud Foundation Operations, without details on exploitation, patching, or PoC availability.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vmware | aria_operations | - | - | - |
| App | vmware | cloud_foundation | - | - | - |
| App | vmware | cloud_foundation | 9.1 | - | - |
| App | vmware | telco_cloud_platform | - | - | - |
| App | vmware | vsphere | - | - | - |
| App | vmware | vsphere | 9.1 | - | - |