Related Threat Clusters
-
VMware Cloud Foundation Operations Faces Multiple Stored XSS Vulnerabilities
Broadcom has disclosed three stored cross-site scripting (XSS) vulnerabilities in VMware Cloud Foundation Operations and related products. The vulnerabilities, tracked as CVE-2026-41722, CVE-2026-41723, and…
9 articles · Updated June 8, 2026 -
VMware Aria Vulnerabilities Enable Remote Code Execution Attacks
On February 24, 2026, Broadcom issued security advisory VMSA-2026-0001 detailing multiple vulnerabilities in VMware Aria Operations, including CVE-2026-22719, which allows unauthenticated remote code execution during…
28 articles · Updated February 24, 2026 -
CISA Alerts on Exploited Memory Corruption Vulnerability in Qualcomm Chipsets
CISA has identified a memory corruption vulnerability in Qualcomm chipsets, tracked as CVE-2026-21385, which is actively being exploited in attacks. Organizations are urged to implement vendor-provided mitigations…
4 articles · Updated March 4, 2026 -
CISA Adds XWiki and VMware Vulnerabilities to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to the XWiki Platform and Broadcom's VMware Aria Operations and VMware Tools to its Known Exploited Vulnerabilities…
2 articles · Updated October 31, 2025 -
CISA Confirms Active Exploitation of VMware ESXi CVE-2025-22225
CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in…
7 articles · Updated February 5, 2026 -
CISA Updates KEV Catalog with XWiki and VMware Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to the XWiki Platform and Broadcom's VMware Aria Operations and VMware Tools to its Known Exploited Vulnerabilities…
2 articles · Updated October 31, 2025
Recent Intelligence Reports
- 37513 — support.broadcom.com · June 8, 2026
- VMware: Multiple products with stored cross-site scripting vulnerabilities — Heise.De · June 8, 2026
- CISA Warns of Actively Exploited Memory Corruption Flaw in Qualcomm Chipsets — Cyberpress · March 4, 2026
- VMware Aria Operations flaws could enable remote attacks — Securityaffairs.Co · February 24, 2026
- VMware Aria Operations Vulnerability Could Allow Remote Code Execution — Securityweek · February 24, 2026
- Multiple VMware Aria Vulnerabilities Allow Remote Code Execution Attacks — Cybersecuritynews · February 24, 2026
- CISA: Ransomware intrusions exploiting VMware ESXi bug ongoing — Scworld · February 6, 2026
- CISA: VMware ESXi flaw now exploited in ransomware attacks — Bleepingcomputer · February 4, 2026