CVE-2026-41723

No fix known EPSS <1%CVSS 8.0

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Published 2026-06-08 · CVE record · OSV

Products: VMware VCF operations, VMware Aria Operations, VMware Telco Cloud Platform