Cybersecuritynews

VMware Aria Vulnerabilities Enable Remote Code Execution Attacks

First seen 24 Feb 2026, 13:11 UTC • Cybersecuritynews

+17 •50.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On February 24, 2026, Broadcom issued security advisory VMSA-2026-0001 detailing multiple vulnerabilities in VMware Aria Operations, including CVE-2026-22719, which allows unauthenticated remote code execution during product migrations. Organizations utilizing affected VMware products are advised to prioritize patching to prevent potential exploits.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Timeline

2026-02-24

Broadcom issued security advisory VMSA-2026-0001

2026-02-24

CVE-2026-22719 disclosed allowing remote code execution

Recent

Organizations advised to prioritize patching

Attack Flow

18 entities, 40 inferred relationships (STIX 2.1).

Technique (5)

Ransomware
Remote Code Execution
Zero-day Exploit
T1059 - Command and Scripting Interpreter
T1203 - Exploitation for Client Execution

Organization (1)

Broadcom

Vulnerability (3)

CVE-2026-22719
CVE-2026-22720
CVE-2026-22721

Affected Platform (8)

Aria Operations
Cloud Foundation
Telco Cloud Infrastructure
Telco Cloud Platform
VCenter
VMware Aria Operations
VMware Cloud Foundation
VSphere

Tool (1)

VMware

Relationships

VMware exploits CVE-2026-22719
VMware exploits CVE-2026-22720
VMware exploits CVE-2026-22721
CVE-2026-22719 targets Aria Operations
CVE-2026-22719 targets Cloud Foundation
CVE-2026-22719 targets Telco Cloud Infrastructure
CVE-2026-22719 targets Telco Cloud Platform
CVE-2026-22720 targets Aria Operations
CVE-2026-22720 targets Cloud Foundation
CVE-2026-22720 targets Telco Cloud Infrastructure
CVE-2026-22720 targets Telco Cloud Platform
CVE-2026-22721 targets Aria Operations
CVE-2026-22721 targets Cloud Foundation
CVE-2026-22721 targets Telco Cloud Infrastructure
CVE-2026-22721 targets Telco Cloud Platform
Ransomware targets Aria Operations
Ransomware targets Cloud Foundation
Ransomware targets Telco Cloud Infrastructure
Ransomware targets Telco Cloud Platform
Remote Code Execution targets Aria Operations
Remote Code Execution targets Cloud Foundation
Remote Code Execution targets Telco Cloud Infrastructure
Remote Code Execution targets Telco Cloud Platform
Zero-day Exploit targets Aria Operations
Zero-day Exploit targets Cloud Foundation
Zero-day Exploit targets Telco Cloud Infrastructure
Zero-day Exploit targets Telco Cloud Platform
T1059 - Command and Scripting Interpreter targets Aria Operations
T1059 - Command and Scripting Interpreter targets Cloud Foundation
T1059 - Command and Scripting Interpreter targets Telco Cloud Infrastructure
T1059 - Command and Scripting Interpreter targets Telco Cloud Platform
T1203 - Exploitation for Client Execution targets Aria Operations
T1203 - Exploitation for Client Execution targets Cloud Foundation
T1203 - Exploitation for Client Execution targets Telco Cloud Infrastructure
T1203 - Exploitation for Client Execution targets Telco Cloud Platform
CVE-2026-22719 related to Broadcom
CVE-2026-22719 related to VCenter
CVE-2026-22719 related to VMware Aria Operations
CVE-2026-22719 related to VMware Cloud Foundation
CVE-2026-22719 related to VSphere

Continue Reading

Critical Buffer Overflows in VMware and FreeIPMI Expose Systems to Remote Code Execution Critical VMware Fusion Vulnerability Allows Local Privilege Escalation Critical Symantec DLP Agent Vulnerability Enables Privilege Escalation Critical Calix Router Flaw Exposes Home Networks to Attack Anthropic's Claude Mythos Preview Sparks Cybersecurity Revolution Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

VMware Aria Vulnerabilities Enable Remote Code Execution Attacks

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading