Search: CVE-2026-41724

VMware Cloud Foundation (VCF) Operations version 5.x contains multiple stored cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow a malicious user with privileges to create policies, views, or text widgets to inject scripts that could perform administrative actions within the VCF Operations environment. The issue is classified under CWE-79 and has a high severity rating with a CVSS score of 8. No official patch or remediation guidance has been provided yet.