漏洞概述 VMware Cloud Foundation Operations 更新解决了多个漏洞（CVE-2026-41722、CVE-2026-41723 和 CVE-2026-41724）。这些漏洞包括多个存储的跨站脚本（XSS）漏洞，严重性范围为重要，最高 CVSSv3 基础得分为 8.0。 影响范围 VMware Aria Operations VMware Cloud Foundation Operations VMware Cloud Foundation VMware vSphere Foundation VMware Telco Cloud Platform 修复方案 VMware Cloud Foundation 9.1.0 VMware vSphere Foundation 9.1.0 VMware Cloud Foundation 9.0.2 EP2 VMware vSphere Foundation 9.0.2 EP2 VMware Aria Operations 8.18.7 VMware Aria Operations 8.18.6 VMware Cloud Foundation 5.x VMware Telco Cloud Platform 5.x 详细信息 CVE-2026-41722 CVE-2026-41723 CVE-2026-41724 参考链接 VMware Cloud Foundation 9.1.0 VMware vSphere Foundation 9.1.0 VMware Cloud Foundation 9.0.2 EP2 VMware vSphere Foundation 9.0.2 EP2 VMware Aria Operations 8.18.7 VMware Aria Operations 8.18.6 VMware Cloud Foundation 5.x VMware Telco Cloud Platform 5.x 联系信息 电子邮件: vmware.psirt@broadcom.com PGP 密钥: https://knowledge.broadcom.com/external/article/321551 其他资源 VMware 安全顾问: https://www.broadcom.com/support/vmware-security-advisories VMware 外部漏洞响应和补救政策: https://www.broadcom.com/support/vmware-services/security-response VMware 生命周期支持阶段: https://support.broadcom.com/group/eci/productlifecycle VMware 安全博客: https://blogs.broadcom.com/security X: https://x.com/VMwareSRC 版权信息 Copyright © 2005-2026 Broadcom. All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries. Accessibility