CVE-2026-22720: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in VMware VMware Aria Operations
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// .
AI Analysis
Technical Summary
VMware Aria Operations 8.18.0 contains a stored cross-site scripting vulnerability (CWE-79) identified as CVE-2026-22720. The flaw allows an attacker with benchmark creation privileges to inject malicious scripts that execute with administrative capabilities in the application context. This can lead to compromise of confidentiality, integrity, and availability of the system. The vulnerability is addressed by applying patches listed in VMware's security advisory VMSA-2026-0001.
Potential Impact
Successful exploitation allows an attacker with limited privileges to perform administrative actions via script injection, potentially leading to full compromise of VMware Aria Operations. The CVSS score of 8.0 reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Apply the official patches provided by VMware as detailed in the 'Fixed Version' column of the Response Matrix in security advisory VMSA-2026-0001 (https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947). This is the recommended and official fix. No alternative mitigations are indicated.
CVE-2026-22720: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in VMware VMware Aria Operations
Description
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// .
CVSS v3.1
Score 8.0high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
VMware Aria Operations 8.18.0 contains a stored cross-site scripting vulnerability (CWE-79) identified as CVE-2026-22720. The flaw allows an attacker with benchmark creation privileges to inject malicious scripts that execute with administrative capabilities in the application context. This can lead to compromise of confidentiality, integrity, and availability of the system. The vulnerability is addressed by applying patches listed in VMware's security advisory VMSA-2026-0001.
Potential Impact
Successful exploitation allows an attacker with limited privileges to perform administrative actions via script injection, potentially leading to full compromise of VMware Aria Operations. The CVSS score of 8.0 reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Apply the official patches provided by VMware as detailed in the 'Fixed Version' column of the Response Matrix in security advisory VMSA-2026-0001 (https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947). This is the recommended and official fix. No alternative mitigations are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- vmware
- Date Reserved
- 2026-01-09T06:54:36.841Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 699f6b0db7ef31ef0b54d932
Added to database: 2/25/2026, 9:35:09 PM
Last enriched: 4/14/2026, 11:15:52 AM
Last updated: 5/27/2026, 1:58:58 AM
Views: 122
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.