VMWare Telco Cloud Infrastructure

• CVE-2026-59310 Critical 9.8 Exploited vCenter directory-traversal vulnerability 2.6%
• CVE-2026-22719 High 8.1 Exploited VMware Aria Operations command injection vulnerability 18.3%
• CVE-2025-22224 Critical 9.3 Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machin 1.6%
• CVE-2026-59309 Critical 9.8 vCenter authentication-bypass vulnerability 0.6%
• CVE-2025-41250 High 8.5 Header injection vulnerability 0.7%
• CVE-2025-41241 Medium 4.4 Denial-of-service vulnerability 0.3%
• CVE-2025-41239 High 7.1 vSockets information-disclosure vulnerability 3.2%
• CVE-2025-41238 Critical 9.3 PVSCSI heap-overflow vulnerability 0.5%
• CVE-2025-41237 Critical 9.3 VMCI integer-underflow vulnerability 0.5%
• CVE-2025-41236 Critical 9.3 VMXNET3 integer-overflow vulnerability 2.6%
• CVE-2025-41228 Medium 4.3 VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability 0.9%
• CVE-2025-41227 Medium 5.5 Denial-of-Service Vulnerability 0.2%
• CVE-2025-41226 Medium 6.8 Guest Operations Denial-of-Service Vulnerability 0.2%
• CVE-2025-41225 High 8.8 VMware vCenter Server authenticated command-execution vulnerability 0.3%