Yüksek CISA KEV
CVE-2026-22719: Broadcom VMware Aria Operations: aktif olarak istismar edilen açık
Açıklama (NVD)
Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.
Özet bilgiler
- EPSS
- %18,32 (yüzdelik 97)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2026-03-03 · Son tarih: 2026-03-24
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.