5 spills in 12 months for VMware
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Past orders
- criticalpatchedexploited Broadcom VMware vCenter Path Traversal Vulnerability Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).
- highpatchedexploited Omnissa Workspace ONE Server-Side Request Forgery Omnissa Workspace One UEM Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information. Added to CISA KEV on 2026-03-09 (federal deadline 2026-03-23).
- highpatchedexploited Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration. Added to CISA KEV on 2026-03-03 (federal deadline 2026-03-24).
- highpatchedexploited Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution. Added to CISA KEV on 2026-01-23 (federal deadline 2026-02-13).
- highpatchedexploited Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Added to CISA KEV on 2025-10-30 (federal deadline 2025-11-20).
Follow VMware
RSS: /feed.xml?stack=vmware. JSON: /incidents.json?stack=vmware. Or add it to your usual for delivery.