CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026-22719 to KEV Catalog
Summary: CISA added CVE-2026-22719, a high-severity command injection flaw (CVSS 8.1) in Broadcom VMware Aria Operations, to its KEV catalog on Tuesday, citing active exploitation in the wild. Broadcom said an unauthenticated actor could execute arbitrary commands leading to remote code execution during support-assisted product migration, and noted it is aware of reports of potential exploitation but cannot independently confirm their validity.
What's compelling: Federal Civilian Executive Branch agencies must apply the fixes by March 24, 2026, and there are no details yet on who is exploiting the flaw or at what scale - so the exposure window is open while the attacker remains unidentified.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2026-22719CVE-2026-22720CVE-2026-22721
- Related
- ⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More Cyber Risks ·CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability Known Exploited Vulnerabilities · Mar 03, 2026New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026