VMware Multiple Stored XSS Vulnerabilities Security Advisory CVE-2026-41722/23/24

Vulnerability Overview VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723, and CVE-2026-41724). These vulnerabilities include multiple stored Cross-Site Scripting (XSS) flaws, with severity ranging from Important to High, and a maximum CVSSv3 Base Score of 8.0. Affected Products VMware Aria Operations VMware Cloud Foundation Operations VMware Cloud Foundation VMware vSphere Foundation VMware Telco Cloud Platform Remediation VMware Cloud Foundation 9.1.0 VMware vSphere Foundation 9.1.0 VMware Cloud Foundation 9.0.2 EP2 VMware vSphere Foundation 9.0.2 EP2 VMware Aria Operations 8.18.7 VMware Aria Operations 8.18.6 VMware Cloud Foundation 5.x VMware Telco Cloud Platform 5.x Details CVE-2026-41722 CVE-2026-41723 CVE-2026-41724 References VMware Cloud Foundation 9.1.0 VMware vSphere Foundation 9.1.0 VMware Cloud Foundation 9.0.2 EP2 VMware vSphere Foundation 9.0.2 EP2 VMware Aria Operations 8.18.7 VMware Aria Operations 8.18.6 VMware Cloud Foundation 5.x VMware Telco Cloud Platform 5.x Contact Information Email: vmware.psirt@broadcom.com PGP Key: https://knowledge.broadcom.com/external/article/321551 Additional Resources VMware Security Advisories: https://www.broadcom.com/support/vmware-security-advisories VMware External Vulnerability Response and Remediation Policy: https://www.broadcom.com/support/vmware-services/security-response VMware Lifecycle Support Phases: https://support.broadcom.com/group/eci/productlifecycle VMware Security Blog: https://blogs.broadcom.com/security X: https://x.com/VMwareSRC Copyright Information Copyright © 2005-2026 Broadcom. All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries. Accessibility

Goal Reached Thanks to every supporter — we hit 100%!

VMware Multiple Stored XSS Vulnerabilities Security Advisory CVE-2026-41722/23/24