A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2026-22719

Broadcom VMware Aria Operations Command Injection Vulnerability

Published
2026-03-03
Modified
2026-07-31
Sources
cisa-kev

Summary

Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.