CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.
- Score
- CVSS 3.1 8.0 High
- Status
- Analyzed - security@vmware.com
- Published
- 2026-06-08
- Last modified
- 2026-06-09
- Weaknesses
- CWE-79
Affected products
- Aria Operations (Vmware)
- Cloud Foundation (Vmware)
- Telco Cloud Platform (Vmware)
- Vcf Operations (Vmware)
- Vmware Aria Operations (Vmware)
- Vmware Telco Cloud Platform (Vmware)
- Vsphere (Vmware)
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513
