{"cvss":8.1,"datePublished":"2026-03-03","dateUpdated":"2026-03-03","description":"Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.","dueDate":"2026-03-24","id":"CVE-2026-22719","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ; https://knowledge.broadcom.com/external/article/430349 ; https://nvd.nist.gov/vuln/detail/CVE-2026-22719","product":"VMware Aria Operations","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Broadcom VMware Aria Operations Command Injection Vulnerability","vendor":"Broadcom"}