VMware Aria Operations RCE Vulnerabilities Disclosed by Broadcom

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VMware Aria Vulnerabilities Enable Remote Code Execution Attacks On February 24, 2026, Broadcom issued security advisory VMSA-2026-0001 detailing multiple vulnerabilities in VMware Aria Operations, including CVE-2026-22719, which allows unauthenticated remote code execution during product migrations. Organizations utilizing affected VMware products are advised to prioritize patching to prevent potential exploits. 28 sources 50